Bump Rails to 3.2.18

Also pin rack-test to the ref we know is good.