new Rails to deal with security thing yet again