update gemfile for security reason