updating for rails vunerability