updated Rails version due to vulnerability