fixed rails security vulnerability by updating rails