use https for rubygems.org

http requests are insecure