upgrade rack to patch security vulnerability