Updated rails

more security holes plugged.