point to https rubygems

Set `Gemfile` source to `https://rubygems.org`

Since the recent rubygems.org exploit the rubygems team have been recommending that everyone update their Gemfiles to have `source` point to `https`

From #Rubygems on Freenode

> over http, a man in the middle could provide you a malicious gem