Updating Rails for security fix

https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo
Merge commit '28d1390c0ecfe3ca5456f4a055f9b7dd1a8cb5db' into staging