Bump rails to 3.2.18

This picks up the latest security fixes
Merge pull request #163 from alphagov/bump-rails-to-3.2.18

Bump rails to 3.2.18