update rails to 3.2.20

This is a security fix against a file existence exposure CVE-2014-7819

see:
http://weblog.rubyonrails.org/2014/10/30/Rails_3_2_20_4_0_11_4_1_7_and_4_2_0_beta3_have_been_released/

Conflicts:
	Gemfile.lock
Fix sprockets file exposure vulnerability

There is an information leak vulnerability in Sprockets. This
vulnerability
has been assigned the CVE identifier CVE-2014-7819.

see:
https://groups.google.com/forum/#!topic/rubyonrails-security/wQBeGXqGs3E

The patch given in
https://15028051456732132684.googlegroups.com/attach/7887e1a7070ca526/2-12-sec-static-files.patch?part=0.0.1&view=1&vt=ANaJVrGrEs8fNpWjOUFuf3p1rWA83Dw-kPMJ8qeYExCi_n6nnuHcw53a2rWDfBwsfeA06s9Okm3LkpBK1W_b0vsqlsNAHGW1g0Z0T8WcmWxvqJCshdVpLts

Was manually applied to the backport branch.

This commit can be reverted as soon as sprockets 2.12.X is used.
Merge pull request #2118 from opf/hotfix/backport_rails_3_2_20

[release/3.0] Fix CVE-2014-7818 and CVE-2014-7819
Revert "Fix sprockets file exposure vulnerability"

This reverts commit 17c666c8dc39a482ca8afa6f3c3fb048ed6428a0.
Revert "update rails to 3.2.20"

This reverts commit 2d785b257055c4e12d48fb1b6bac1960d6793f80.
update rails to 3.2.20

This is a security fix against a file existence exposure CVE-2014-7819

see:
http://weblog.rubyonrails.org/2014/10/30/Rails_3_2_20_4_0_11_4_1_7_and_4_2_0_beta3_have_been_released/

Conflicts:
	Gemfile.lock
update sprockets to 2.2.3

https://groups.google.com/forum/#!topic/rubyonrails-security/doAVp0YaTqY
> Fixed Versions:     3.0.0.beta.3, 2.12.3, 2.11.3, 2.10.2, 2.9.4, 2.8.3, 2.7.1, 2.5.1, 2.4.6, 2.3.3, 2.2.3, 2.1.4, 2.0.5