save the world from rails security bug