Brakeman fix XSS vulnurability