update to latest Rails for security reasons