change rails version to one without an exploit