use rails 3.2.11 (important security update)