update to rails 4.1.5

Contains security fixes so I'm merging and deploying this as soon as CI passes