Switch to git tree to pull in CVE-2014-4920 for Rails 3.x