adding brakeman gem and updating rails to 3.2.13
moving secret token to application.yml via Figaro gem to please Brakeman