rack security fix

@see https://support.cloud.engineyard.com/entries/23128893-February-8-2013-Rack-Vulnerability