use https://rubygems.org in Gemfile since :rubygems is deprecated
bump to 1.3.6