update Gemfile for rails security