make rails more secure