lock activesupport to >= 4.0.10 for kevlar compatibility