apply Rails security patch
apply Rails security patch

see https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/DCNTNp_qjFM

Change-Id: I711f1182195d1847408636ab2f9e77a7f0047ac3
Reviewed-on: https://gerrit.instructure.com/16478
Tested-by: Jenkins <d95b56ce41a2e1ac4cecdd398defd7414407cc08@instructure.com>
Reviewed-by: Simon Williams <088e16a1019277b15d58faf0541e11910eb756f6@instructure.com>
QA-Review: Stanley Stuart <d3942c3cf0aa13de8a95b690bdc33eab29ac4e73@instructure.com>
Reviewed-by: Stanley Stuart <d3942c3cf0aa13de8a95b690bdc33eab29ac4e73@instructure.com>

jay3126/canvas-lms,wimemx/Canvas,AndranikMarkosyan/lms,tgroshon/canvas-lms,parbros/red-innovadores-lms,venturehive/canvas-lms,fronteerio/canvas-lms,juoni/canvas-lms,roxolan/canvas-lms,matematikk-mooc/canvas-lms,ShreniiNepal/shrenii_lmp,Unow/ins,kyroskoh/canvas-lms,shidao-fm/canvas-lms,wye0220/shindig-canvas,skmezanul/canvas-lms,skmezanul/canvas-lms,Unow/ins,greyhwndz/canvas-lms,Unow/canvas-lms,nditech/red-innovadores-lms,grahamb/canvas-lms,arrivu/jigsaw-lms,shidao-fm/canvas-lms,narigone/canvas,wimemx/Canvas,SwinburneOnline/canvas-lms,nditech/red-innovadores-lms,jay3126/canvas-lms,sdeleon28/canvas-lms,leftplusrightllc/canvas-lms,fronteerio/canvas-lms,merichar/canvas-lms,matematikk-mooc/canvas-lms,arrivu/arrivu-lms,antoniuslin/canvas-lms,instructure/canvas-lms,instructure/canvas-lms,wye0220/shindig-canvas,leftplusrightllc/canvas-lms,wrdsb/canvas-lms,va7map/canvas-lms,djbender/canvas-lms,jay3126/canvas-lms,snehakachroo1/LSI_replica,kyroskoh/canvas-lms,greyhwndz/canvas-lms,loganrun/pincan,juoni/canvas-lms,samuels410/greatlakes-lms,antoniuslin/canvas-lms,AndranikMarkosyan/lms,sfu/canvas-lms,Jyaasa/canvas-lms,snehakachroo1/LSI_replica,sfu/canvas-lms,HotChalk/canvas-lms,rup/Tarrax,AndranikMarkosyan/lms,Rvor/canvas-lms,juoni/canvas-lms,whalejasmine/canvas-lms,parbros/red-innovadores-lms,juoni/canvas-lms,utkarshx/canvas-lms,merichar/canvas-lms,arrivu/qibla-ecampus,antoniuslin/canvas-lms,snehakachroo1/LSI_replica,arrivu/jigsaw-lms,usmschuck/canvas,arrivu/hiring-site,leftplusrightllc/canvas-lms,grahamb/canvas-lms,sdeleon28/canvas-lms,SwinburneOnline/canvas-lms,roxolan/canvas-lms,instructure/canvas-lms,narigone/canvas,skmezanul/canvas-lms,dgynn/canvas-lms,sfu/canvas-lms,dgynn/canvas-lms,eCNAP/CANVAS,wrdsb/canvas-lms,skmezanul/canvas-lms,snehakachroo1/LSI_replica,AndranikMarkosyan/lms,antoniuslin/canvas-lms,Jyaasa/canvas-lms,ShreniiNepal/shrenii_lmp,arrivu/hoodemo,eCNAP/CANVAS,redconfetti/canvas-lms,arrivu/arrivu-lms,samuels410/greatlakes-lms,gbleydon/canvas-lms,efrj/canvas-lms,efrj/canvas-lms,shidao-fm/canvas-lms,redconfetti/canvas-lms,Rvor/canvas-lms,roxolan/canvas-lms,Jyaasa/canvas-lms,narigone/canvas,redconfetti/canvas-lms,whalejasmine/canvas-lms,wrdsb/canvas-lms,sli7246/canvas_branch,Rvor/canvas-lms,fronteerio/canvas-lms,tgroshon/canvas-lms,samuels410/greatlakes-lms,grahamb/canvas-lms,rup/Tarrax,arrivu/jigsaw-lms,wimemx/Canvas,venturehive/canvas-lms,tgroshon/canvas-lms,ShreniiNepal/shrenii_lmp,fronteerio/canvas-lms,arrivu/qibla-ecampus,kyroskoh/canvas-lms,redconfetti/canvas-lms,usmschuck/canvas,Jyaasa/canvas-lms,sfu/canvas-lms,gbleydon/canvas-lms,whalejasmine/canvas-lms,va7map/canvas-lms,sdeleon28/canvas-lms,kyroskoh/canvas-lms,greyhwndz/canvas-lms,eCNAP/CANVAS,eCNAP/CANVAS,efrj/canvas-lms,usmschuck/canvas,HotChalk/canvas-lms,Unow/ins,whalejasmine/canvas-lms,greyhwndz/canvas-lms,loganrun/pincan,sfu/canvas-lms,va7map/canvas-lms,sfu/canvas-lms,matematikk-mooc/canvas-lms,grahamb/canvas-lms,djbender/canvas-lms,arrivu/hoodemo,Rvor/canvas-lms,ShreniiNepal/shrenii_lmp,arrivu/hiring-site,usmschuck/canvas,roxolan/canvas-lms,jay3126/canvas-lms,rup/Tarrax,instructure/canvas-lms,samuels410/greatlakes-lms,sli7246/canvas_branch,utkarshx/canvas-lms,landonwilkins/canvas-lms,instructure/canvas-lms,landonwilkins/canvas-lms,landonwilkins/canvas-lms,va7map/canvas-lms,arrivu/arrivu-lms,gbleydon/canvas-lms,dgynn/canvas-lms,instructure/canvas-lms,shidao-fm/canvas-lms,landonwilkins/canvas-lms,nditech/red-innovadores-lms,utkarshx/canvas-lms,HotChalk/canvas-lms,merichar/canvas-lms,djbender/canvas-lms,wye0220/shindig-canvas,matematikk-mooc/canvas-lms,wrdsb/canvas-lms,sfu/canvas-lms,nditech/red-innovadores-lms,dgynn/canvas-lms,arrivu/hoodemo,djbender/canvas-lms,instructure/canvas-lms,grahamb/canvas-lms,leftplusrightllc/canvas-lms,arrivu/qibla-ecampus,venturehive/canvas-lms,loganrun/pincan,SwinburneOnline/canvas-lms,arrivu/hiring-site,parbros/red-innovadores-lms,efrj/canvas-lms,SwinburneOnline/canvas-lms,sli7246/canvas_branch,tgroshon/canvas-lms,venturehive/canvas-lms,Unow/canvas-lms,sdeleon28/canvas-lms,utkarshx/canvas-lms,Unow/canvas-lms,HotChalk/canvas-lms,narigone/canvas