upgrade sass-rails for security alert