Update to Rails 4.0.2 for multiple CVE fixes.