Upgrade to Rails 3.0.19 to avoid CVE-2013-0156.