Bump rails to 4.0.2
- Fixes CVEs http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/
- ActiveRecord queries with multiple conditions needs a new syntax