rails security upgrade + bundle update
add missing scrypt gem