fixes for the problems posed in rails-example-security