Fix CVE vulnerabilities

  CVE-2014-7829 ActionPack - Arbitrary file existence disclosure
  CVE-2014-7818 ActionPack - Arbitrary file existence disclosure
  CVE-2014-3514 ActiveRecord - Strong parameter bypass with create_with
  CVE-2014-3483 ActiveRecord - PostreSQL injection vulnerability
  CVE-2014-0130 Rails - Directory transversal with certain route configs
  CVE-2014-7819 Sprockets - Arbitrary file existence disclosure
  CVE-2014-4920 Twitter Bootstrap Rails - Reflective XSS vulnerability