security commit and rspec