update rails version for security patches