add Gemfile.lock to gitignore

see http://stackoverflow.com/questions/4151495/should-gemfile-lock-be-included-in-gitignore
lock rspec version to ~> 2.14.1