fix last security warning regarding session key, update brakeman report
screenshot of brakeman report