Security tracking

Implemented Brakeman 
We should move this to secrets.yml ( [Rails Doc](http://edgeguides.rubyonrails.org/4_1_release_notes.html#config-secrets-yml), which is the Rails 4.1.x standard. It allows to have the token set for development and test and then use ENV in other environments.