update to rails 2.3.19 and brakeman 2.6.1