Fixing security vulnerablity with rails