upgrading to rails 4.1.1 because of CVE-2014-0130