updated rails upon security threat alert by heroku