lock down gem versions
update dependencies