Use Rails.root instead of deprecated RAILS_ROOT
option to create src tags for attached components
don't html-escape ajax response