Upgrade simple_form to patch XSS bug