update rails to fix security vulnerability; see http://blog.heroku.com/archives/2013/1/11/rails_security_vulnerability