bundle update rails to addr security