Security update for Rails and sprockets