source https://www.rubygems.org because :rubygems uses HTTP, which is insecure
Merge pull request #437 from alanjcfs/change-source-to-https

make bundler source https because :rubygems uses HTTP