bump rails and deps