SECURITY: Upgrade Rails to 4.0.3

This fixes CVE-2014-0080 and CVE-2014-0081.