Correct rails security vulnerability
try fix github commit