changes for a new rails security bug