fix for rails vuln
better fix for vuln