:rubygems is insecure, use https