Update Rails to v4.1.5, fix CVE-2014-3514.