Declare dependencies in gemspec, and use secure Rubygems url