make Activity#render more secure and allow passing :locals