Upgrade Rails after the announcement of CVE-2013-0155 and CVE-2013-0156