Rails security fix.