bump mail gem version to fix CVE-2012-2140.

See https://github.com/rails/rails/pull/9571/

@tamird @strzalek