use a secure version of rubygems, and rebundle for some updates