Update rails (CVE-2014-0130)