upgrade rails in light of widespread security vulnerability