downgrade rails to 3.1.10 to patch rails security vulnerability