Gemfile cleanup - remove outdated heroku gem, and use HTTPS address for rubygems.org

Silences warnings.  Addresses #380.