workaround for CVE-2014-4920

Conflicts:
	app/views/layouts/login.html.haml