rails and json gem security update