Rails upgrade for https://groups.google.com/forum/#!topic/rubyonrails-security/dCp7duBiQgo