Upgrade rails to fix XML vulnerability