update rails and ruby
fix omniauth, and switch to encrypted cookie store