demos of typical security exploits against a deliberately insecure rails site