lock httparty and activesupport versions for ree