Patch rails security vulnerability