update rails to resolve vulnerability