update gems to address security vulnerabilities

Fixes:

    Denial of Service and Unsafe Object Creation Vulnerability in JSON
    [CVE-2013-0269]

    Circumvention of attr_protected
    [CVE-2013-0276]