upgrade for RoR security prob