bundle update rails - security update