Update rack dependency to 1.4.x

1.4.x is the best what we can get now, 1.5.x breaks ActionPack tests.

/cc @tamird