update rails and sprockets with security fix
Merge branch 'rm_production'