update gems to fix security vulns