adjust Gemfile
downgrade rack to 1.4.1 to avoid the warning about security
link: https://github.com/rails/rails/issues/7372