Security upgrade for rails and sprockets