Lock down Rails in the default gemfile

For some reason, Bundler cannot resolve dependencies when working
against the wide-open gemspec Rails requirements.