update Rails to non-super insecure version