update rubygems source to secure URL