bump mail gem version to fix CVE-2012-2140.
See https://github.com/rails/rails/pull/9571/