Gemfile should use https://rubygems.org

Seriously. SSL -- it's more than just a good idea.