calling to_sym on user provided data is dangerous[1]. can we do this using strings please?

[1] http://www.ruby-doc.org/core-2.0.0/doc/security_rdoc.html#label-Symbols