update rack-ssl to mitigate CVE-2014-2538.

Should I also bump the patch level version to account for this change?