fix #217
Update models.py
fix #186;
security fix: found by @hamb and his friend
Merge pull request #220 from ihptru/master

not announced security bug fixed silently