update rails for security reasons