updating version of rails to patch a known vulnerability