trying to help out removing the security notifications

[DevinBayly]

I'm pretty sure we don't need to have the gemfile stuff committed to the repo, but I don't work with ruby so I can't say for sure. Looking at the other maptimes they don't have this.