Security updates for Rails and JSON