Add support for Rails LTS 2.3.17 and 2.3.18

Avoid warning about CVE-2012-1099 and CVE-2014-0081 when using appropriate versions of RailsLTS.