rails security patches (security-related)