Update Rails and vulnerability in JSON [CVE-2013-0269]

Also fixes the rack vulnerability.