update rails cuz security