update gemfile for rails security issues