increased rails version to avoid security risks