use https source for more secure gem retrieval