upgrade rails - security alert