update bundle with latest rails to cover security vulnerability