rails devise security issue resolved