update paperclip

[nossila]

because of security issue mentioned in
thoughtbot/paperclip#2530

[jexp]

ping @cheerfulstoic

[cheerfulstoic]

I'm not sure it's the responsibility of the neo4jrb-paperclip gem (or any helper / integration library) to require versions of security purposes. As I understand, version specifications in the gemspec are to specify which versions of paperclip that this gem is compatible with. If somebody is using a project with an older version of paperclip and doesn't have the time to upgrade and it's an internal project or they are OK with the security tradeoffs, that's probably up to them to upgrade their version of paperclip when they are ready.

[cheerfulstoic]

Closing, but that doesn't mean I'm not open to being convinced