https://trello.com/c/TON3eWHX/181-update-gems-with-vulnerabilities
see my comment regarding sprockets