update rails: security issues