first security pass
parameter escape the search box, add attr_accessible to post model, added susceptible files to .gitignore
https://app.asana.com/0/11169835259596/12523594086742
upgrade Rails to 3.2.17
https://app.asana.com/0/11169835259596/12304177440658