upgraded Gemfile to new rails version following security alert