Heroku's suggested Rails vulnerability fix