Rails security update - upgraded to 4.0.2