Security fix 1/8/13 due to Rails bug