Fix Brakeman issues. Fix sql injection and javascript exploits.

Prefer single-quoted strings when you don't need string interpolation or special symbols.