update to a secure gem source