Updating gems to deal with security issues and excluding Gemfile.lock from commits?