update Gemfile for security
fiddling with tests