Rails 3/4 RCE