fixed other rails insecurity