README: adding instructions for brakeman.
fixing cross site scripting vulnerability.