add security in rails