Rails update due to the SECURITY VULN from hell