Add version 2 constraint for savon to gemspec

Savon 3 changes some things including requiring WSDLs and removing
some dependencies. It's probably a good idea to have a pessimistic
constraint for Savon 2.x to avoid surprises.