Installed brakeman and guard-brakeman to scan for vulnerabilities
Now can read cookie secret token from environment variable (so it isn't published on Github)