steps improvement and rails security patch