Gemfile: move to rails ~> 3.2.11 (CVE-2013-0155,CVE-2013-0156), update Gemfile.lock