update rack-ssl to mitigate CVE-2014-2538.

More info on the CVE, https://bugzilla.redhat.com/show_bug.cgi?id=1078612

Should I also bump the patch level version to account for this change?