update rails and json (security)