bump nokogiri version

Addresses CVE-2013-2877 and CVE-2014-0191. See https://groups.google.com/forum/#!topic/ruby-security-ann/-qrzZ05vsXY