locking in gemfile