changed dependency to rails 3019 for jan 2013 security hole