[CVE-2014-7829] upgrade rails to v3.2.21

Bump Rails to 3.2.21 because of CVE-2014-7829