use secure ref for rubygems
remove 1.8 from travis for now because they don't have stdlib json