update rails to 3.2.11 because of vulnerability