Pin rack-test to known good version

We're pinned to an unreleased version of rack-test because it contains
a fix we require (https://github.com/brynary/rack-test/pull/69)
Bump Rails ro 3.2.18