update for security patch to rails and rack