Security update for rails and sprockets