Security and Backup Review

[grmarcil]

This needs to be broken down into more granular tasks before work begins. Conduct a review of application security (rails best practices, etc) as well as backup strategy for the database.

• any user can edit any other user's information #44 Users can edit other users - should be addressed in devise permissions
• Implement Basic Admin User #96 Implement admin/edit/read-only users and test permissions

[grmarcil]

Check http://code.tutsplus.com/tutorials/mass-assignment-rails-and-you--net-31695 to add strong parameters protection