updated rails dependency to prevent Rack vuln