rails sec update
rails sec update, devise