Gemfile updates: "source" + "git@" url

* Eliminates warning for `source` not being HTTPS-based.
* Uses `git@` rather than `git://` URL for fetching `showoff` as those are not supported by GitHub any more.