Rails up and running

includes security fixes and CSS structure