Rails security upgrade to 4.1.7