Bumped Rails version for CVE-2013-0333 and fixed escaping issue caused by new Rails.
Merge pull request #2169 from gwagener/1-0-stable

Bumped Rails version for CVE-2013-0333 and fixed escaping issue caused by new Rails