change to more secure source URL in Gemfile

From the bundler warning:

"The source :rubygems is deprecated because HTTP requests are insecure. Please change your source to 'https://rubygems.org' if possible, or 'http://rubygems.org' if not."
update Gemfile.lock