use https to access rubygems.org #396