Fix the nasty sql injection attack
Update to use thin