Lock down gem dependencies

I locked them all pessimistically to allow for patches