sass-rails security update for sprockets