Update Gemfile.lock and drop comments

Now that we've updated graphiql-rails, we no longer need to include the
comments about the CSP workaround.

Fix the GraphQL explorer tests that broke as a result of the update.