use https sources in Gemfiles and also in the documentation (#4109)