fixes #5610 - upgrade to Rails 3.2.18

(cherry picked from commit 7ccee9dcdfc87b8dff78fccd94a556ac4c2cce66)
fixes #5612 - use correct permissions for authz in parameters API

(cherry picked from commit 7cb05aa94e942bd3917c6cde33957288ea84a735)