Freeze hashie to 3.2.0 since it breaks omniauth (CookieOverflow)