Pin the rails-api version in the Gemfile.lock

- This should have been in #2, 68d05ad39185e9dd812480a72bcdd16d57caaf2a.