Bump Rails to 3.1.9

This fixes a security vulnerability. See discussion on this ticket:

https://www.pivotaltracker.com/story/show/41874751