update rails: 3.1.1 => 3.1.10 per 'Rails Security Vulnerability' email from heroku