Lock down ruby dependencies using Gemfile.lock