Rails Vulnerability fix