Bumped Rails version in response to CVE-2013-0156.