changed rails version due to insecurity