updated rails version because of heroku vulnerability