update for rails security