downgrade rails but still secure