Bump Rails

To pick up recent security fixes