Emergency Rails bugfix

https://blog.heroku.com/archives/2013/1/11/rails_security_vulnerability/