fixed json security vulnerabillity https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/4_YvCpLzL58