upgrading rails to avoid security vulnerability