Rails version bump for security fix