add Gemfile.lock to lock in specific working versions on bundler