Replaced webkit with phantomjs (doesn't require Xvfb/Xserver) for tests.
Moved credentials from source to env.
Updated rails, brakeman, rails_best_practices gems.