require rails 3.1.10 so all security fixes are included