bump sinatra dependency
add Gemfile.lock to source control