Upgrade to Rails 3.0.19 to mitigate CVE-2013-0156 and CVE-2013-0155