-- updated to rails 3.2.11 to avoid security problem