Security update for actionpack