loose guzzlehttp version constraint