Rails upgrade to address CVE-2014-3514 (activerecord create_with vulnerability)

Upgrade rails 4.1.0 to 4.1.5

/cc @zendesk/samson

### TODO

- [x] update Gemfile, followed by *bundle update rails*
- [x] remove stale vendor gems

### RISKS
- verify that samson runs well after the gem updates