Nakul Aggarwal and Ritesh Arora have put together a concise, to the point, Ruby on Rails Security Guide that looks at how to tackle security issues in your authentication system, models, controllers, views, and elsewhere. Lots of links, lots of tips, and a must-read for anyone who's not feeling 100% confident in the security of their Rails app.