WIP security fix - temp bump default rails version