Added brakeman gem to raise securitah *cough*. It indicated that keeping the super duper secret session secret in git is not a good idea, especially when we let do Github the hosting. Make sure copy config/initializers/secret_token.rb.template to [without .template] and insert a secret token generated by 'rake secret'