add lesson plan for auditing and improving rails security