add Gemfile.lock for deployment