update rails for vuln