Update Rails, fix security vulnerability