add brakeman to check for security issues