security: updating JSON gem