Bump rails to 4.1.5

This picks up the latest security fixes.
Merge pull request #40 from alphagov/bump-rails-to-4.1.5

Bump rails to 4.1.5