sandboxing a rails app