reintroduced Gemfile.lock since Heroku needs it