gemfile: +puma, +_scripts/update
made _scripts/update executable (doh)
turned off SSL on production