upgrade rails bcs security