Updated rails so we don't get bitten by the JSON bug.

  CVE-2013-0276
  CVE-2013-0277
  http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/

Thanks to james@jamesrgifford.com.  I accidentally lost his commit with
our force-push stuff, but wanted to give credit where due :-\