Bump rails to 4.1.5

This picks up the latest security fixes.