Brakeman fixes

Fixed view and controller security issues