new rails version

Fix up to CVE 2013-1857