force usage of sql-injection-proof Rails version.

http://weblog.rubyonrails.org/2014/7/2/Rails_4_0_8_and_4_1_4_have_been_released/
Users should be forced to use the secure version of Rails in order to prevent sql-injections.