Update Rails to address CVE-2013-0156