draft of core team docs
Use ENV var for secret_token
Add brakeman with rake task
Use strong_parameters to guard against mass assignment
Skip CSRF check

The app does not use sessions and is only an API. CSRF does not apply.
Merge pull request #82 from github/brakeman

Add Brakeman
Merge remote-tracking branch 'origin/master' into core

* origin/master: (43 commits)
  Skip CSRF check
  Use strong_parameters to guard against mass assignment
  Add brakeman with rake task
  Use ENV var for secret_token
  Add a note about phantomjs
  Update README to include working on swordfish
  Update signout feature to lock feature
  Rename Sign Out to Lock
  Update Rails to v3.2.11
  Add .ruby-version so works with rvm and rbenv
  Rename url_domain => domain
  Use protocol-relative URL for favicon service
  Use anchor for parsing the url
  Adds favicon for line item. Using google service from #9
  Fetch password when copying to clipboard
  Remove console/alert
  remove hover classes
  remove cucumber format to debug travis failures
  Avoid autoloading webmock
  Prepare database before running tests
  ...
Add info on joining the core team
Merge pull request #61 from github/core

Create a core team
Fix typo

Thanks, @calebthompson