changes to Gemfile.lock to reflect actual dependency versions, and
return an empty string if the salts do not exist.