Update Rails to 4.1.8. Addresses CVE-2014-7829.

The vulnerability addressed here only happens if you're serving static assets directly from Rails, which is not the case if you're using Nginx configured correctly. Patching anyway just to have the latest.