Update Rails to 2.3.16 to get fix for CVE-2013-0333.