rails-core released 2.3.16 to fix CVE-2013-0155 (@stouset)

* https://github.com/rails/rails/compare/v2.3.15...v2.3.16
* http://osvdb.org/89025