update Gemfile.lock to reflect new version
hash token with sha512 against timing attacs #3398