updated rails ver, updated permissions to block unauthorized users to contribute to private playlists