Bundle update rails - security patch