Security brakeman

Hey guys: need a true PR here.

Gemnasium propose a free security analysis from Brakeman, so I fix here all the "HIGH" risks.
In the process, I dropped GroupingController which was used only by TagController (very old concept we didn't maintain) and rewrite a bunch of rspec.

Please let an eye here: any comment is welcome.
Right, and I’m still using it from time to time :)
--  
Frederic de Villamil / @fdevillamil
http://t37.net 

> On 11 Dec 2014, at 08:54, Matijs van Zuijlen <notifications@github.com> wrote:
> 
> In spec/controllers/articles_controller_spec.rb:
> 
> > @@ -340,7 +340,7 @@
> >          create(:redirect, :from_path => 'foo', :to_path => 'http://some.where/else')
> >          get :redirect, :from => "foo"
> >          assert_response 301
> > -        expect(response).to redirect_to("http://some.where/else")
> > +        expect(response).to redirect_to("/else")
> 
> I think the idea was to have a full URL shortening service. @fdevillamil am I right?
> 
> —
> Reply to this email directly or view it on GitHub.
>