lock mocha version and include rake as dev dependency