Add Brakeman gem
Use update_attributes! in place of dangerous send
Protect redirects
Add line break