upgraded rails & json after yet anothersecurity vulnerability announcement