fix last brakeman security issue