Update rails, lock deps
Add dynamic callbacks. Closes gh-3.