updated to rails 4.1.0 for security