add .rvmrc for project specific gemset and update rails for security patch