added rails vulnerability note