Bumped Rails version for CVE-2013-0333 and fixed escaping issue caused by new Rails