rails->3.1.12, json->1.7.7 security vulnerability fix