Add rails_12factor gem
Scope API to prevent unauthorized access