fix for Rails CVE-2012-5664
bump version to 1.3.3
make controls title param work for table-plus