simple rails / web sandboxing