upgraded to current rails version due to security fixes