Rails security updates

http://osvdb.org/show/osvdb/103439
http://osvdb.org/show/osvdb/103440