calling ruby object properties from js securely. Basic stuff for calling ruby methods from js