bump ruby to a secure version
prevent circular dependance issue in Rails 4.