remove unused deploy files
+brakeman
remove secret_token from git
fix validation regexps
enforce whitelist mass-assignment attributes
annotate models
attr_accessible for BP models