don't lock activesupport version too high