lock koa-router to version 2.3.x to prevent errors; further investigation is required