Add upper bound for active-* gems

We do not yet support ActiveRecord and ActiveSupport 4.x, so ensure our Gemfile declares this.

Reported by @ZeroChaos

## Verification Steps

- [ ] Run bundler: `bundle install`
- [ ] Ensure `Gemfile.lock` does not change
- [ ] Run `./msfconsole`
- [ ] `db_status` shows database is connected