security fix for will_paginate