Add brakeman as dev dependency for security checks

Run `rake sec` or `brakeman` to check app security.