Rails security patches