Added brakeman and updated
Use sanitize to allow some HTML