update gemfile for security patch