Fix CVE-2014-3483 - rails active record vulnerability