Lock down Gemfile for production