Force SSL in production
upgrade ruby version
Configure SecureMarshal
Update to Rails 4.0.1
Warn for invalid rails 3 cookies
Don't try to taint frozen objects