update sass-rails and sprockets: includes security fix