update rack to fix a security vuln