Upgrading rails to fix bug and security hole