Bump Rails

To pick up recent security fixes
Merge pull request #44 from alphagov/bump_rails

Bump Rails