update rails for json sec fix