upgrading rails & json due to security holes