bump rspec to 2.12.0

Change-Id: I3ec7fb9a22b9ed8fee8d0694babda3b61d98bc04
bump mocha to 0.13.2

Change-Id: I89137d06f9f90a93e9b09583e2630c453665062b
bump rails to 3.0.20

Fixes JSON vulnerability
(https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo)

Change-Id: I5d6a80cd7062a2022be1dd571ef41a035d34a454
Merge commit 'd6c938841e0d3667f6ca45b6ec5a17cc96747089'