Improve User#get_undescribed_requests SQL
Improve InfoRequest.find_in_state SQL
Improve InfoRequestEvent#incoming_message_selective_columns SQL
Fix Cross Site Scripting in user/_signin
Add global protect_from_forgery

Grepping the git logs didn’t bring up a good reason for this to be
excluded. Seems like it came along after the app was initially created
so it never got fully added for fear of regressions. The specs pass for this
commit.
Line length
Add brakeman config and ignore files
Merge branch 'brakeman_fixes' into rails-3-develop