Bump rails and json gem version (fixes CVE-2013-0276 and CVE-2013-0269)