lock gemfiles to specific versions of rails