Use HTTPS url; suppress Bundler warning