Some rails security fixes