lock sprockets version to 2.8