Rails vuln fixed