Bump rails to 3.2.18

This picks up the latest security fixes