bundle update

Includes Rails security fix.

/cc @zendesk/samson