update gems for security vulns