rails upgrade to 3.2.11  --  Security issue