Review and episode tests

Finish test suite, couple of bug fixes. Also clear up some security and dependencies
This formatting is weird:

```ruby
before_action :authenticate_user!,
  only: [:create, :update, :edit, :update, :destroy, :vote]
```