updated rails to protect against exploit