+ brakeman; fix security issues