update rack-ssl to mitigate CVE-2014-2538.