update rails version for security foo