Updating Rails vulnerability