add some security frm railsg