Upgrade because of rails security vulnerability