use https rubygems since it is more secure