lock down sinon version