upgrade rails to 4.0.12

addresses [CVE-2014-7829](https://groups.google.com/forum/#!topic/rubyonrails-security/rMTQy4oRCGk)