Update Rails to 3.2.11 and add backstop patches for CVE-2013-0156.