Update to Rails 3.2.21 (fixes CVE-2014-7829)