Upgraded rack to 1.1.6, fixes CVE-2013-0263, timing attack against Rack::Session::Cookie
Upgraded Rails to 2.3.17 and JSON gem to 1.5.5, security fixes.