Bump rails to 4.1.4

This picks up the latest security fixes.