Make tests resilient to gemfile changes

Recent change to bump Ruby version in the secure test caused chaos because of the pre-existing Gemfile.lock.  Removing Gemfile.lock before running tests is needlessly slow.  Catching a failed bundle install and trying a bundle update works for these scenarios.