Move non-core dependencies into Gemfile

guard is a nice thing; rspec is necessary for tests