Updated rails to avoid ActionPack vuls.

https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
Merge pull request #33 from jrgifford/master

Updated rails to avoid ActionPack vuls.