pointing at latest release of hydra-head as a dependency, and upping rails to 3.2.11, which has a few critical security fixes