rails updated for exploit