Update actionpack and sprockets to address CVE-2014-7818