Disable xml parsing: CVE-2013-0156
adjusted gem dependencies so i could get this old project's specs running
Upgrade to Rails 2.3.16 for security fixes.