Gemfile: move to rails 3.2.10 (CVE-2012-5664), update Gemfile.lock