locking the rails version to 4.0.9+