updated rails to 3.0.20 to fix security issue