title: Rails security on production server
body: <p>I am putting my first rails app on the internet, I have read the rails guide on security and have implemented the points listed in there but was interested to hear of anything else ?</p>
  
  <p>Also I currently store my uploads in public/documents is this ok ? I noticed there is no htaccess files protecting the directory.</p>