Security updates for rails

- rails 2.3.12 (CVE-2013-0269)
- json 1.7.7 (CVE-2013-0276) (added explicit ref)