rails 3.2.16 (security fix) + fix a bug preventing the consume tag to work