update rails version for this security fix
http://blog.heroku.com/archives/2013/1/11/rails_security_vulnerability/