upgrade to rails 3.2.16. closes gh-513