security fix for rails