Bump Rails to 3.1.9

This fixes a security vulnerability. See discussion on this ticket:

https://www.pivotaltracker.com/story/show/41874751
Merge pull request #123 from alphagov/bump_rails_3_1_9

Bump Rails to 3.1.9