pin versions for devise and neo4j gems