bundle update

Signed-off-by: Jonathan E. Magen <yonkeltron@gmail.com>
upgrade rails to deal with secvuln