Bump rails to 3.2.11 (fixes CVE-2013-0155 and CVE-2013-0156)