update gemfile.lock
the main page is not https here