change rails version requirement

https://gemnasium.com/ was alerting me that the '~> 4.0' requirement was bad.
It seems like I have to set the rails dependency to only 4.0.5 or higher (in order to avoid letting people use an insecure version of rails).
bump version