uses HTTPS rubygems as source

HTTP is no longer considered safe.