remove explicit xstream dependency from gsr

Needed to update the version of xstream to resolve test failures.
Xstream gets pulled in transitively, so instead of explicitly pegging a
version, use the one that gets pulled in instead.