Bump rails version to fix vulnerabilities that were just made public.