update rails/json to patch security vulns