refactor omniauth initializer
disable gzip on critical paths to preven BREACH attack