stop calling to_sym when building arel nodes [CVE-2013-1854]

@bjhess @zmoazeni 

Cherry-picked commit from rails/rails 3-2-stable that fixes CVE-2013-1854.