Upgrade to security-patched rails