security and heroku updates

* heroku: delayed job now optional (to allow support on heroku)
* minor: fixed phone number detection
* security: upgraded to Rails 2.3.16
* heroku: use postgres in production