updates rails to latest version due to JSON vulnerability