Update rails for CVE 2014-0130