upgraded rails version for security reasons