remove db.yml and move pg gem out of production group
Add brakeman gem for security checks
DRY logged in user checks
Enable postgres
Store sessions in database
Expire sessions in 2 weeks
some spacing