Update Rails to fix security bug