bumped rails, devise and misc gems primarily for security reasons