added Brakeman for static security scanning