Fix databag form url to allow new item creation; CHEF-3951
Use select_tag, not select, to generate non-object form; CHEF-4004
update rails version for security update