Apply Rails security patch and remove remaining RuboCop TODOs