Bumped to Rails 3.0.20 to mitigate CVE-2013-0333