at Figure 8.9
security update for rails
up to listing 8.30
fix typo "destory" -> "destroy"