Nov 2013 security fixes for railsexpress patches

added railsexpress patches for latest 2.0.0 releases.

can you please merge (and release a new rvm version)?