New Rails version, allow higher multi_json version

* multi_json wants to be 1.7.x
* Rails 3.2.12 has a serious security vulnerability