Upgrade to rails with security fixes