sufia should use HH 5.4 and Rails 3.2.11

HH 5.4 brings a patch that makes authZ work again, and Rails 3.2.11 contains multiple security patches over 3.2.8 as a baseline.