Make sure you only include these two gems in a `development` group, otherwise an attacker could use them to exploit your site in production. `rails_12factor` should also be limited to the `production` group, though I'm not sure if it causes any negative side effects in development.