use rails 3.2.16
Merge pull request #721 from opf/fix/rails_3.2.16

[security] use rails 3.2.16