Update rails after CVE-2013-0276