require activerecord 4.1.7

Support Rails security patch - CVE-2014-7819, CVE-2014-7818