Update rails to fix security issue

Heroku and Michael Hartl both suggest updating rails to fix a security
issue in 3.2.9