Simplest Security Best Practices (for servers hosting Ruby on Rails apps)