add search and sql injection vunerability to test with brakeman