updating rails version to avoid known vulnerability