update rails version pinning to allow 4.0