patch rails security vulnerability and upgrade refinery