upgrade rails to 3.2.11, for two extremely critical security fixes