updated rails per security notice