Security fixes.

Sinatra 1.2.6 depends on packages with security holes. Thanks for the alert,
Gemnasium.