Update rails to fix injection vulnerability