update GEMFILE.lock for heroku