upping version of rails to avoid sql injection vulnerability