Fixing Rails Security Vulnerability