update dependencies to avoid parameter parsing vulnerability
remove Gemfile.lock as per http://yehudakatz.com/2010/12/16/clarifying-the-roles-of-the-gemspec-and-gemfile/
Merge pull request #25 from markburns/security_fix

Security fix