Update to rails 4.0.3

Patches [CVE-2014-0080](https://groups.google.com/forum/#!topic/rubyonrails-security/Wu96YkTUR6s) and [CVE-2014-0081](https://groups.google.com/forum/#!topic/rubyonrails-security/tfp6gZCtzr4).