CVE-2014-7829, static.rb update and version bump

This commit fixes CVE-2014-7829, and updates actionpack/lib/action_dispatch/middlware/static.rb to
rails 3.2 to support the fix for the CVE. Version incremented to v3.0.20.13.