updated rails, security