update to rails 4.0.4 to fix security vuln