Use secure rubygems source
Specify ref for rails4 branches on dependencies