lock nokogiri version to ~> 1.4.0, change http to https in Gemfile