Security fix, bump rails to 3.1.10