remove session setting
update brakeman
update rails