Ruby on Rails security considerations

[mattmenefee]

Should we mention these things? https://github.com/brunofacca/zen-rails-security-checklist