add rails_autolink and fix a whitelist issue in packages#show