adding Cargo.lock

so I hear this file is supposed to be checked in as well...