updating Rails due to vulnerability