Update Rails for this week's vulnerability

Addresses CVE-2013-0156.