upgrades to rails 3.2.11

see http://blog.heroku.com/archives/2013/1/11/rails_security_vulnerability/