update rails to 4.1.7 (CVE-2014-7818)