Bump rails to 3.2.10 (to fix CVE-2012-5664)

Also upgrade rspec, capybara, oai: with some fixes to the specs