Upgrading Rails due to CVE-2013-0333