Backport of security patch.

* sets rails to 2.3.15
* removes security patches now part of rails 2.3.15