update rails for security patch
update URL in readme