Fixed sql injection vulneralbilities, changed header

## Description and Impact
Makes it pretty much ready for production, 

## URLs
> Links to bug tickets or user stories.

#### Risk Level:
- [X] Low
- [ ] Medium
- [ ] High

you should change this to `with_a_pull_request` and keep what you have but add a having at the end
```ruby
.having("pull_request_count > 0")
```
Then you can get rid of that conditional in the view.