update Rails for security patches