Rails security issue fix