update rails version for security