fix security warning on ruby 2