Rails upgrade for security patch