update to Rails 3.2.11 to get around vulnerabilities