Rails 4 bump paranoia

Turns out that paranoia 1.3 won't even let us bundle due to activerecord dependency conflicts.