upgrade to Rails 3.0.19 to patch CVE-2013-0156 security vulnerability