Bump actionpack and sprockets for security fixes