Fix for CVE-2013-0155

CVE-2013-0155 was originally stated to not affect ActiveRecord 2.3.x, but per this announcement: https://groups.google.com/group/rubyonrails-security/browse_thread/thread/73b8d3f8478df5e2, it does. This PR applies the patch supplied to the vendored rails in dashboard.