point `source` to `https://rubygems.org`

Since the recent rubygems.org exploit the rubygems team have been recommending that everyone update their Gemfiles to have `source` point to `https://rubygems.org`

From the Rubygems chatroom on Freenode

> over http, a man in the middle could provide you a malicious gem

I'm closing [Pull Request 755](https://github.com/emberjs/data/pull/755) (because I believe the Travis build was failing due to my having been using Ruby 1.8.7 on my localhost when I ran `bundle update`) and issuing a new pull request here.