update rails version for security patch