security fixes for rails, as a convenient gem