fix for rails vuln