switch Bundler to HTTPS
drop some dev deps and bundle update