Bump rails to 4.1.7 for CVE-2014-7818 and CVE-2014-7819

Make http://seclists.org/oss-sec/2014/q4/474 and http://seclists.org/oss-sec/2014/q4/475 moot.