Add note on Rails security upgrades to change file.
Try just specifying that rails should come from git, to avoid deprecation warnings about "require 'actionmailer'" rather than "require 'action_mailer'" etc.