Update todo
Upgrade rails to avoid SQL injection attack