upgraded to Rails 3.2.11 to fix Action Pack vulnerability