updated rails version because of security vulnerability