+brakeman
remove secret_token from git
fix validation regexps