hyhull: Rails security fix