Gemfile.lock now reflects https rubygems

Because security