Update sprockets because of CVE-2014-7819