Use brakeman with travis

@kmcphillips adding brakeman b/c I worry with write access to github repos