upgrade rails to 3.2.18 for security fixes