Updating to Rails 3.2.11 because of SQL injection vulnerability