security update rails
custom validation