updated to latest rails 4 due to security vulnerabilities