updating gems. there was a rails security patch or something