Gems should not check Gemfile.lock into version control

Best practice is to use the gemspec instead.

Ref: http://yehudakatz.com/2010/12/16/clarifying-the-roles-of-the-gemspec-and-gemfile/
Specify the exact version of rails

This matters for skyline.