add Gemfile.lock so that continuous integration doesn't always update to latest