lock socket.io version