updated rails for vulnerability