bump rails version due to recent security kerfuffle
add rails-api 0.3.0 upgrade fix for wrapped params from http://git.io/_1fQWw