upgraded rails to 3.0.19 to avoid serious framework vulnerability