fix:security

http://lists.heroku.com/t/ViewEmail/r/4AC4716696A139E82540EF23F30FEDED/257143E9BFE452FE6A4D3D471B02C3D7