Update GemFile and Gem list to patch for rails sql injection critical bug