updates
add Gemfile.lock; exclude vendor/