update for rails for security reason, better OPDS support