fixed some security vulnerabilies from brakeman