Update rails to 4.1.7 (CVE)