Update Rails to 4.0.8, fix CVE-2014-3483.

Also had to update sass-rails and bourbon because of Asset pipeline
related error `undefined method `environment' for nil:NilClass`