updated gems
upgraded rails to 4.1.0.rc1 per CVE-2014-0081 and CVE-2014-0080
downgraded back to rails 4.0.3 as it still covers CVE-2014-0081 and 0080 but doesn't complain about ':order' keys.  Will need to fix those in the acts_as_sane_tree gem soon.