bump rails dependency to allow 4.2

Tested with our app with no unintended consequences