[security] Rails update

Closes #34