fix rails security + gallery
change gallery link to flickr photostream