upgrade ruby to 2.1.5 (CVE-2014-8090)