Ruby on Rails security updates patch XSS, DoS vulnerabilities