Use https for rubygems
Add Gemfile.lock so bundle install works with deployment flag