Simple Rails app with vulnerability for testing