Address CVE-2014-7829

Can't find a permalink but I got it through the rails security email list. Basically a security release that shouldn't break anything that is relied on.