update rails
fix issue where experience, life and level can be edit by user