switch Bundler to HTTPS
drop most dev deps