Update Rails to 3.2.18

This Rails release closes a security issue but we're not affected by it.
See CVE-2014-0130 for further details.