update rails for security upgrades