use a secure gem source
oops, this should have been included in ac28f59e3