Heroku reported vulnerability in Rails 3.0.19 - upgrading to 3.0.20