fix bundle-audit for actionpack