Bumping rails version for AR vunerability