Fix security issue with sequelize generated id attribute