cleanup
bundle update; use https