Fix security bug by upgrading rails to 3.2.11.