update rails version to prevent security vulnerability