added brakeman and fixed vulnerability