Fix security hole in rails_admin