Security: Bump rails to 3.2.12, json to 1.7.7