updated latest rails fix entry

- 3.2.15 has the fix, not 3.2.14
- 2.x didn't have the vulnerability
- note is only meant for special cases like problems with the new version