added brakeman security static code analysis gem -- run with 'brakeman' in the top-level dir to get a report on various static code checks