fixed potential denial of service exploit http://brakemanscanner.org/docs/warning_types/denial_of_service/