Updated rails to fix security holes.

Derp, guess Kandan wasn't on my list of apps this go around.