Urgent rails security fix

Upgrade rails to 2.3.17 and upgrade json gem.

This is turning into a weekly activity. ;-)

See http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/