use source 'https://rubygems.org', :rubygems deprecated and insecure
handle http redirects, and errors