Bump rails to 3.2.17 (fixes CVE-2014-0081 and CVE-2014-0082)