update Gemfile for vulnerabilities