Bumping versions and locking down QME

Setting QME to v3.0.3
Going up to Rails 4.1.5
Bumping commits we point to on HDS and hqmf2js
Pegging active_model_serializers to 0.8.1 because 0.9 breaks the app