Update Rails to 3.12.2

Fix vulnerability in attr_protected addressed by
CVE-2013-0276.