updated rails version for major security fix