Lock Rubocop at 0.13.1.

The pessimistic lock doesn't really work when an application is not yet at the first version.  0.13 -> 0.14 introduced major changes and fails the travis build.
Switch the default to htauth