include locator and download_url in dataset api response
pin gem versions to avoid ruby 1.9 dependencies