users_controller requires security on its actions. Use CanCan 'load_and_authorize_resource' to control this.
Send emails to file in development mode
Don't show user list if not logged in.
Clean up Capfile
Remove unnecessary whitespace and test hook.
Remove old 'rake acceptance' task
Refactored secret token generation code to generate and persist a secret token in the DB if one doesn't exist.
Hide password related attributes from the logs.
File syntax layout tweak.
Escape autocomplete output safely.
Locked down available views in Task.
sanitize list.url
Merge branch 'security-fixes'