bumping a lot of gems due to security vulnaribilities in action pack, rails, and active record