fix dependencies

It actually doesn't technically need all of Rails, but paper_trail requires various pieces of Rails, so this was the easiest way I saw to ensure the pieces it brings in match the version of Rails we've standardised across the company (4.x)