rails 3.2.16 now required, as it includes important security fixes