Rails and JSON security updates t:10