deps updated and locked

Security update for sprockets: https://groups.google.com/forum/#!topic/rubyonrails-security/doAVp0YaTqY