Upgrade to Rails 4.0.2 to patch security holes