Update to Rails 3.2.11 and add manual backstop patches for CVE-2013-0156