update rails to latest secure thing