Rails security threat fix