rails update for security vulnerability