update rails version for security vulnerabilities