Disabling installing gems from rubygems.org

Since we’re pinning the versions for rspec we have to turn off the
rubygems.org source or it won’t install the cached version.
Pin server spec too.