lock authlogic to < 3.3.0

https://github.com/binarylogic/authlogic/issues/400