add Gemfile.lock to version control

So that everyone doing development is using the same versions of
dependencies. Fixes #323