update rack to 1.4.5 per security alert