Bump rails for SQL injection vuln