better formatting for price
Rails 3 security fix