Updated rails to avoid ActionPack vuls.

https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion


If you are a kandan user, I highly recommend you merge this in ASAP. Thank you.