security update to address rails vulnerability

http://6brand.com/patch-your-projects-vulnerable-to-rails-xml-yaml-security-hole.html