Security updates

Can someone push this into production, please? Also can someone give me access to the Heroku instance (my usual Gmail account)?