improve gemfile version locking