add upper bound for wai-middleware package