upgrade to rails 3.2.11 to avoid the recent CVE annoucements