upgraded to rails 3.0.20 to fix CVE-2013-0333 https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo