Fix Brakeman issues. Fix sql injection and javascript exploits.

Use the new Ruby 1.9 hash syntax.