update Rails to 3.2.11 (security-fix)