use https for rubygems source

This is minor, but the Gemfile should not be pointing to http://rubygems.org.