Strengthen case to generate unique secret token.
Ensure requests are protected.
Add custom serializers for xml and json.
Fixed sql injection in timeline method.
Refactor activity_user to remove possible SQL injection points.
Bump version [ci skip]
Update README.md
Lock down routes.
Remove stub hook
Remove unneccessary function
Don't spam gmail by default
consider_all_requests_local should be off by default in production mode
Remove pysch by default (optimise for ruby 2 now)
Fixed typos
Fixed regular expression logic to be more sensitive to newline attacks.
Cleaned code, no functional changes.
Strengthen validation
users_controller requires security on its actions. Use CanCan 'load_and_authorize_resource' to control this.
Send emails to file in development mode
Don't show user list if not logged in.