Rails and JSON security updates