important security update of rails and json gem