update rails and sprockets with security fix