diff --git a/.env.example b/.env.example
index 7c05f6e69..a25b320af 100644
--- a/.env.example
+++ b/.env.example
@@ -63,6 +63,8 @@ amazon_authorize_key=
 
 # Third party integration (required)
 congress_forms_url=http://phantomdc.example.com
+google_civic_api_url=https://www.googleapis.com/civicinfo/v2/representatives/
+google_civic_api_key=
 smarty_streets_id=
 smarty_streets_token=
 
diff --git a/.env.test b/.env.test
index 5c939e805..d479be1ac 100644
--- a/.env.test
+++ b/.env.test
@@ -8,8 +8,8 @@ call_tool_api_key=xyz
 
 storage=s3
 amazon_region=us-west-1
-amazon_bucket=actioncenter-staging
-amazon_bucket_url=actioncentertest.s3-us-west-1.amazonaws.com
+amazon_bucket=actioncenter-test
+amazon_bucket_url=actioncenter-testurl.s3-us-west-1.amazonaws.com
 
 supporters_api_key=xyz
 supporters_host=https://civicrm.test
diff --git a/.gitignore b/.gitignore
index 156f76604..a3e9e0020 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@ public/webshims
 
 # Ignore dotenv file
 /.env
+/public/uploads
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 000000000..6c97cdaa1
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,26 @@
+stages:
+  - build
+
+variables:
+  IMAGE_NAME: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
+
+before_script:
+  - env
+  - docker info
+  - docker login -u gitlab-ci-token -p $CI_JOB_TOKEN $CI_REGISTRY
+
+build:
+  stage: build
+  script:
+  - docker build --pull --label "repo=$CI_PROJECT_URL" -t $IMAGE_NAME .
+  - docker push $IMAGE_NAME
+  - |
+    if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
+      docker tag "$IMAGE_NAME" "$CI_REGISTRY_IMAGE:latest"
+      docker push "$CI_REGISTRY_IMAGE:latest"
+    fi
+  # Run this job in a branch where a Dockerfile exists
+  rules:
+    - if: $CI_COMMIT_BRANCH
+      exists:
+        - Dockerfile
diff --git a/.rubocop.yml b/.rubocop.yml
index 7933b1521..cf8cb7555 100644
--- a/.rubocop.yml
+++ b/.rubocop.yml
@@ -1,18 +1,78 @@
+require:
+  - rubocop-rails
+  - rubocop-performance
+
 inherit_gem:
   rubocop-github:
     - config/default.yml
     - config/rails.yml
 
 AllCops:
-  TargetRailsVersion: 4.2
-  TargetRubyVersion: 2.3
+  TargetRailsVersion: 7.0
+  TargetRubyVersion: 3.0
+  NewCops: enable
+  SuggestExtensions: false
   Exclude:
     - 'db/**/*'
     - 'config/**/*'
     - 'bin/**/*'
     - 'vendor/**/*'
+    - 'features/**/*'
+
+# Handle cops not enabled by default
+# Should probably be checked on rubocop version upgrades
+# Last checked 02/09/21
+# Disables cops marked as unsafe in docs
+
+Layout/SpaceAroundMethodCallOperator:
+  Enabled: true
+
+Lint/RaiseException:
+  Enabled: true
+
+Lint/StructNewOverride:
+  Enabled: true
+
+Style/ExponentialNotation:
+  Enabled: true
+
+Style/HashEachMethods:
+  Enabled: false
 
-### Override rubcop-github ###
+Style/HashTransformKeys:
+  Enabled: false
+
+Style/HashTransformValues:
+  Enabled: false
+
+Performance/AncestorsInclude:
+  Enabled: false
+
+Performance/BigDecimalWithNumericArgument:
+  Enabled: true
+
+Performance/RedundantSortBlock:
+  Enabled: true
+
+Performance/RedundantStringChars:
+  Enabled: true
+
+Performance/ReverseFirst:
+  Enabled: true
+
+Performance/SortReverse:
+  Enabled: true
+
+Performance/Squeeze:
+  Enabled: true
+
+Performance/StringInclude:
+  Enabled: true
+
+Bundler/OrderedGems:
+  Enabled: false
+
+### Override rubocop-github ###
 
 Style/FrozenStringLiteralComment:
   # We aren't upgrading to Ruby 3.0, so this is just noise
@@ -30,9 +90,6 @@ GitHub/RailsControllerRenderPathsExist:
   # Doesn't seem to work; can't find templates that exist
   Enabled: false
 
-GitHub/RailsApplicationRecord:
-  # Doesn't apply to < Rails 5.0, and ignores TargetRailsVersion
-  Enabled: false
 
 Lint/Void:
   Exclude:
@@ -43,7 +100,7 @@ Lint/Debugger:
   Exclude:
     - 'features/step_definitions/debug_steps.rb'
 
-Style/BlockComments:
+Lint/AmbiguousBlockAssociation:
   Exclude:
     - 'spec/**/*'
 
@@ -65,7 +122,30 @@ Layout/MultilineHashBraceLayout:
 Layout/SpaceAroundOperators:
   Enabled: true
 
+Naming/PredicateName:
+  Exclude:
+    - 'spec/**/*'
+
 Security/JSONLoad:
   Enabled: true
   Exclude:
     - 'spec/**/*'
+
+Rails/HttpStatus:
+  EnforcedStyle: 'numeric'
+
+Style/Alias:
+  Enabled: false
+
+Style/BlockComments:
+  Exclude:
+    - 'spec/**/*'
+
+Style/ClassAndModuleChildren:
+  EnforcedStyle: 'compact'
+
+Style/Documentation:
+  Enabled: false
+
+Style/NumericLiterals:
+  MinDigits: 6
diff --git a/.ruby-version b/.ruby-version
index 0cadbc1e3..fa7adc7ac 100644
--- a/.ruby-version
+++ b/.ruby-version
@@ -1 +1 @@
-2.5.5
+3.3.5
diff --git a/.travis.yml b/.travis.yml
index b4a0ed27c..8ffc83c25 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -14,7 +14,7 @@ before_script:
   - npm install
   - cp config/database.yml.travis config/database.yml
   - psql -c 'create database travis_ci_test;' -U postgres
-  - RAILS_ENV=test bundle exec rails webdrivers:chromedriver:update
+  - google-chrome-stable --headless --disable-gpu --remote-debugging-port=9222 http://localhost &
 script:
   - bundle exec rubocop
   - $(npm bin)/sass-lint -vq
diff --git a/Dockerfile b/Dockerfile
index ea4308c07..844a91e70 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,10 @@
-FROM ruby:2.5-stretch
+FROM ruby:3.3-slim
 
 RUN mkdir /opt/actioncenter
 WORKDIR /opt/actioncenter
 
+COPY db/global-bundle.pem /opt/actioncenter/vendor/assets/certificates/
+
 RUN apt-get update && \
   apt-get install -y --no-install-recommends \
     curl \
@@ -13,24 +15,10 @@ RUN apt-get update && \
     postgresql-client \
     cron \
     gnupg \
-    libssl-dev
-
-RUN set -x; \
-  curl -sL https://deb.nodesource.com/setup_6.x -o nodesource_setup.sh \
-  && chmod +x nodesource_setup.sh \
-  && ./nodesource_setup.sh \
-  && apt-get update \
-  && apt-get install -y --no-install-recommends \
+    libssl-dev \
+    shared-mime-info \
     nodejs \
-    npm \
-  && apt-get clean \
-  && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
-
-RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - \
-  && echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list \
-  && apt-get update \
-  && apt-get install \
-    yarn
+    npm
 
 COPY package.json package-lock.json ./
 RUN npm install
@@ -65,11 +53,10 @@ RUN bundle exec rake assets:precompile \
   SECRET_KEY_BASE=noop \
   devise_secret_key=noop \
   amazon_region=noop \
+  amazon_bucket=noop \
   DATABASE_URL=postgres://noop
-RUN bundle exec rake webshims:update_public
 
-RUN mkdir /opt/actioncenter/log \
-          /var/www
+RUN mkdir /var/www
 RUN chown -R www-data /opt/actioncenter/public \
                       /opt/actioncenter/db \
                       /opt/actioncenter/tmp \
diff --git a/Gemfile b/Gemfile
index e30d333e3..9d57b22e3 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,31 +1,29 @@
 source "https://rubygems.org"
 
-gem "rails", "~> 5.0"
+gem "rails", "~> 7.0.0"
 
-#Database
+# Database
 gem "pg", "~> 1.1"
-gem "pg_search"
+gem "pg_search", "~> 2"
 
 # Hosting-related
-gem "aws-sdk", "~> 2.3"
-gem "aws-sdk-rails", "~> 1"
+gem "aws-sdk-rails", "~> 2"
+gem "aws-sdk-s3", "~> 1"
 gem "dotenv-rails", "~> 2"
 gem "rack-attack", "~> 5"
-gem "rails_12factor", group: :production # Loads "rails_serve_static_assets" and "rails_stdout_logging"
-gem "rails_response_headers", "~> 0"
+gem "rails_response_headers", git: "https://github.com/EFForg/rails_response_headers.git"
 
 # Frontend/assets
 gem "bootstrap-daterangepicker-rails", "~> 3"
 gem "bootstrap-sass", "~> 3.4"
 gem "bourbon", "~> 3"
 gem "bundler", ">= 1.8.4" # needed for rails-assets
-gem "fontello_rails_converter", "~> 0"
 gem "react-rails", "~> 1"
 gem "redcarpet", "~> 3" # Markdown
-gem "sass-rails", "~> 5.0"
+gem "sass-rails", "< 5.1"
 gem "select2-rails"               # Autocomplete select menus
 gem "uglifier", ">= 1.3.0"        # compressor for JavaScript assets
-gem "webshims-rails", "~> 1"
+
 source "https://rails-assets.org" do
   gem "rails-assets-chartjs", "~> 2"
   gem "rails-assets-congress-images-102x125"
@@ -44,17 +42,17 @@ source "https://rails-assets.org" do
 end
 
 # File upload
-gem "paperclip", "~> 5.2"
+gem "carrierwave", "~> 3.0"
+gem "fog-aws"
 
 # Email preformatting
 gem "nokogiri", "~> 1"                    # Required for premailer-rails
 gem "premailer-rails", "~> 1"             # Inline styles for emails
 
-# Optimization
-gem "sprockets-image_compressor", "~> 0" # Optimizes png/jpg
-
 # Analytics
-gem "ahoy_matey", "~> 1.6" # Analytics
+gem "ahoy_matey", "~> 4.0"
+# required for ahoy_matey 2.0 with activerecordstore
+gem "uuidtools", "~> 2"
 gem "chartkick", "~> 3"
 gem "eff_matomo", "~> 0.2.4", require: "matomo"
 gem "groupdate", "~> 2"
@@ -64,16 +62,15 @@ gem "daemons", "~> 1"
 gem "delayed_job_active_record", "~> 4"
 
 # Exception monitoring
-gem "sentry-raven", "~> 0.15"
+gem "sentry-raven", "~> 3.1.2"
 
 # Fancy counter caches
 gem "counter_culture", "~> 2.0"
 
 # Other
-gem "activerecord-session_store", "~> 1"
-gem "acts_as_paranoid", git: "https://github.com/ActsAsParanoid/acts_as_paranoid.git"
+gem "activerecord-session_store", "~> 2.1.0"
+gem "acts_as_paranoid", "~> 0.7"
 gem "cocoon", "~> 1"                      # Dynamically add and remove nested associations from forms
-gem "descriptive_statistics", "~> 2"      # Used for calculating percentiles
 gem "devise", "~> 4.7"
 gem "ejs", "~> 1"                         # Embedded javascript
 gem "email_validator", "~> 1"
@@ -84,17 +81,19 @@ gem "gravatar-ultimate", "~> 2"
 gem "http_accept_language", "~> 2"        # Detect HTTP language header
 gem "invisible_captcha", "~> 0"           # Prevent form submissions by bots
 gem "iso_country_codes", "~> 0"
-gem "jbuilder", "~> 1.2" # JSON APIs
+gem "jbuilder", "~> 2"
 gem "oauth", "~> 0"
 gem "rest-client", "~> 2"
-gem "sanitize", "~> 4" # Sanitize user input
-gem "warden", "1.2.4" # This dep of devise has a bug in 1.2.5 so am avaoiding
+gem "sanitize", "~> 6" # Sanitize user input
 gem "whenever", "~> 0", require: false # Cron jobs
 gem "will_paginate", "~> 3.0"
-gem "xmlrpc"
+gem "xmlrpc", "~> 0.3"
 
 # For creating many records, quickly
-gem "fast_inserter", "~> 0.1"
+gem "fast_inserter", "~> 2.0"
+
+# Pin psych to below version 4 until we're on rails 7 and ruby 3.1
+gem "psych", "< 4"
 
 group :doc do
   # bundle exec rake doc:rails generates the API under doc/api
@@ -103,31 +102,23 @@ end
 
 group :development do
   gem "better_errors", "~> 2"
-  gem "binding_of_caller", "~> 0"
-  gem "rails-dev-tweaks", "~> 1.1"
-  gem "rb-fchange", "~> 0", require: false
-  gem "rb-fsevent", "~> 0", require: false
-  gem "rb-inotify", "~> 0", require: false
 end
 
 group :test do
-  gem "webmock", "~> 2"
+  gem "webmock", "~> 3"
+  gem "selenium-devtools"
 end
 
 group :development, :test do
   gem "byebug"
-  gem "capybara", "~> 3.26"
-  gem "cucumber-rails", "1.6.0", require: false
-  gem "database_cleaner", "~> 1"
-  gem "factory_girl_rails", "~> 4"
-  gem "poltergeist", "~> 1"
+  gem "capybara", "~> 3"
+  gem "factory_bot_rails", "~> 6.2"
   gem "rails-controller-testing"
-  gem "rspec-core", "~> 3"
-  gem "rspec-rails", "~> 3"
-  gem "rubocop", "0.52.0"
-  gem "rubocop-github", "0.9.0"
-  gem "selenium-webdriver", "~> 3"
-  gem "webdrivers", "~> 4"
+  gem "rspec-rails", "~> 6.1"
+  gem "rubocop"
+  gem "rubocop-github", "~> 0.16"
+  gem "rubocop-performance", require: false
+  gem "rubocop-rails", require: false
 end
 
 group :production do
diff --git a/Gemfile.lock b/Gemfile.lock
index 259f5127b..06c40396b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,518 +1,591 @@
 GIT
-  remote: https://github.com/ActsAsParanoid/acts_as_paranoid.git
-  revision: b58c5149d32f06ea729ad1c8bd3ac26d8cde50ce
+  remote: https://github.com/EFForg/rails_response_headers.git
+  revision: 472d93ad39876c350cfb388cf6f7d68433793dc1
   specs:
-    acts_as_paranoid (0.6.0)
-      activerecord (>= 4.2, < 6.0)
-      activesupport (>= 4.2, < 6.0)
+    rails_response_headers (0.3.0)
 
 GEM
-  remote: https://rubygems.org/
   remote: https://rails-assets.org/
   specs:
-    actioncable (5.0.7.2)
-      actionpack (= 5.0.7.2)
-      nio4r (>= 1.2, < 3.0)
-      websocket-driver (~> 0.6.1)
-    actionmailer (5.0.7.2)
-      actionpack (= 5.0.7.2)
-      actionview (= 5.0.7.2)
-      activejob (= 5.0.7.2)
+    rails-assets-EpicEditor (0.2.3)
+    rails-assets-chartjs (2.9.4)
+    rails-assets-congress-images-102x125 (0.1.2)
+    rails-assets-html5shiv (3.7.2)
+    rails-assets-ionicons (2.0.1)
+    rails-assets-jquery (2.1.3)
+    rails-assets-jquery-cookie (1.4.1)
+      rails-assets-jquery (>= 1.2)
+    rails-assets-jquery-timeago (1.6.7)
+      rails-assets-jquery (>= 1.4)
+    rails-assets-jquery-ujs (1.0.3)
+      rails-assets-jquery (> 1.8)
+    rails-assets-lodash (3.7.0)
+    rails-assets-moment (2.9.0)
+    rails-assets-respond (1.4.2)
+    rails-assets-roboto-webfont (0.1.1)
+    rails-assets-sweetalert (1.0.1)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    actioncable (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      nio4r (~> 2.0)
+      websocket-driver (>= 0.6.1)
+    actionmailbox (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      activejob (= 7.0.8.6)
+      activerecord (= 7.0.8.6)
+      activestorage (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      mail (>= 2.7.1)
+      net-imap
+      net-pop
+      net-smtp
+    actionmailer (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      actionview (= 7.0.8.6)
+      activejob (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
       mail (~> 2.5, >= 2.5.4)
+      net-imap
+      net-pop
+      net-smtp
       rails-dom-testing (~> 2.0)
-    actionpack (5.0.7.2)
-      actionview (= 5.0.7.2)
-      activesupport (= 5.0.7.2)
-      rack (~> 2.0)
-      rack-test (~> 0.6.3)
+    actionpack (7.0.8.6)
+      actionview (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      rack (~> 2.0, >= 2.2.4)
+      rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.0.2)
-    actionview (5.0.7.2)
-      activesupport (= 5.0.7.2)
+      rails-html-sanitizer (~> 1.0, >= 1.2.0)
+    actiontext (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      activerecord (= 7.0.8.6)
+      activestorage (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      globalid (>= 0.6.0)
+      nokogiri (>= 1.8.5)
+    actionview (7.0.8.6)
+      activesupport (= 7.0.8.6)
       builder (~> 3.1)
-      erubis (~> 2.7.0)
+      erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.0.3)
-    activejob (5.0.7.2)
-      activesupport (= 5.0.7.2)
+      rails-html-sanitizer (~> 1.1, >= 1.2.0)
+    activejob (7.0.8.6)
+      activesupport (= 7.0.8.6)
       globalid (>= 0.3.6)
-    activemodel (5.0.7.2)
-      activesupport (= 5.0.7.2)
-    activerecord (5.0.7.2)
-      activemodel (= 5.0.7.2)
-      activesupport (= 5.0.7.2)
-      arel (~> 7.0)
-    activerecord-session_store (1.1.3)
-      actionpack (>= 4.0)
-      activerecord (>= 4.0)
+    activemodel (7.0.8.6)
+      activesupport (= 7.0.8.6)
+    activerecord (7.0.8.6)
+      activemodel (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+    activerecord-session_store (2.1.0)
+      actionpack (>= 6.1)
+      activerecord (>= 6.1)
+      cgi (>= 0.3.6)
       multi_json (~> 1.11, >= 1.11.2)
-      rack (>= 1.5.2, < 3)
-      railties (>= 4.0)
-    activesupport (5.0.7.2)
+      rack (>= 2.0.8, < 4)
+      railties (>= 6.1)
+    activestorage (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      activejob (= 7.0.8.6)
+      activerecord (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      marcel (~> 1.0)
+      mini_mime (>= 1.1.0)
+    activesupport (7.0.8.6)
       concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (>= 0.7, < 2)
-      minitest (~> 5.1)
-      tzinfo (~> 1.1)
-    addressable (2.6.0)
-      public_suffix (>= 2.0.2, < 4.0)
-    after_commit_action (1.1.0)
-      activerecord (>= 3.0.0)
-      activesupport (>= 3.0.0)
-    ahoy_matey (1.6.1)
-      addressable
-      browser (~> 2.0)
-      geocoder
-      rack-attack (< 6)
-      railties
-      referer-parser (>= 0.3.0)
-      request_store
-      safely_block (>= 0.1.1)
-      user_agent_parser
-      uuidtools
-    arel (7.1.4)
-    ast (2.4.0)
-    autoprefixer-rails (9.5.1)
-      execjs
-    aws-eventstream (1.0.3)
-    aws-sdk (2.11.264)
-      aws-sdk-resources (= 2.11.264)
-    aws-sdk-core (2.11.264)
-      aws-sigv4 (~> 1.0)
-      jmespath (~> 1.0)
-    aws-sdk-rails (1.0.1)
-      aws-sdk-resources (~> 2)
+      i18n (>= 1.6, < 2)
+      minitest (>= 5.1)
+      tzinfo (~> 2.0)
+    acts_as_paranoid (0.10.2)
+      activerecord (>= 6.1, < 8)
+      activesupport (>= 6.1, < 8)
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
+    ahoy_matey (4.2.1)
+      activesupport (>= 5.2)
+      device_detector
+      safely_block (>= 0.2.1)
+    ast (2.4.2)
+    autoprefixer-rails (10.4.19.0)
+      execjs (~> 2)
+    aws-eventstream (1.3.0)
+    aws-partitions (1.1001.0)
+    aws-sdk-core (3.211.0)
+      aws-eventstream (~> 1, >= 1.3.0)
+      aws-partitions (~> 1, >= 1.992.0)
+      aws-sigv4 (~> 1.9)
+      jmespath (~> 1, >= 1.6.1)
+    aws-sdk-kms (1.95.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-rails (2.1.0)
+      aws-sdk-ses (~> 1)
       railties (>= 3)
-    aws-sdk-resources (2.11.264)
-      aws-sdk-core (= 2.11.264)
-    aws-sigv4 (1.1.0)
-      aws-eventstream (~> 1.0, >= 1.0.2)
+    aws-sdk-s3 (1.169.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sdk-kms (~> 1)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-ses (1.76.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sigv4 (1.10.1)
+      aws-eventstream (~> 1, >= 1.0.2)
     babel-source (5.8.35)
     babel-transpiler (0.7.0)
       babel-source (>= 4.0, < 6)
       execjs (~> 2.0)
-    backports (3.14.0)
-    bcrypt (3.1.13)
-    better_errors (2.5.1)
-      coderay (>= 1.0.0)
+    base64 (0.2.0)
+    bcrypt (3.1.20)
+    better_errors (2.10.1)
       erubi (>= 1.0.0)
       rack (>= 0.9.0)
-    binding_of_caller (0.8.0)
-      debug_inspector (>= 0.0.1)
-    bootstrap-daterangepicker-rails (3.0.3)
-      railties (>= 4.0, < 5.3)
+      rouge (>= 1.0.0)
+    bigdecimal (3.1.8)
+    bootstrap-daterangepicker-rails (3.0.4)
+      railties (>= 4.0)
     bootstrap-sass (3.4.1)
       autoprefixer-rails (>= 5.2.1)
       sassc (>= 2.0.0)
     bourbon (3.2.4)
       sass (~> 3.2)
       thor
-    browser (2.5.3)
-    builder (3.2.3)
-    byebug (11.0.1)
-    capybara (3.26.0)
+    builder (3.3.0)
+    byebug (11.1.3)
+    capybara (3.40.0)
       addressable
+      matrix
       mini_mime (>= 0.1.3)
-      nokogiri (~> 1.8)
+      nokogiri (~> 1.11)
       rack (>= 1.6.0)
       rack-test (>= 0.6.3)
-      regexp_parser (~> 1.5)
+      regexp_parser (>= 1.5, < 3.0)
       xpath (~> 3.2)
-    chartkick (3.3.0)
-    childprocess (2.0.0)
-      rake (< 13.0)
+    carrierwave (3.0.7)
+      activemodel (>= 6.0.0)
+      activesupport (>= 6.0.0)
+      addressable (~> 2.6)
+      image_processing (~> 1.1)
+      marcel (~> 1.0.0)
+      ssrf_filter (~> 1.0)
+    cgi (0.4.1)
+    chartkick (3.4.2)
     chronic (0.10.2)
-    climate_control (0.2.0)
-    cliver (0.3.2)
-    cocoon (1.2.12)
-    coderay (1.1.2)
-    concurrent-ruby (1.1.5)
-    connection_pool (2.2.2)
-    counter_culture (2.2.3)
+    cocoon (1.2.15)
+    concurrent-ruby (1.3.4)
+    connection_pool (2.4.1)
+    counter_culture (2.9.0)
       activerecord (>= 4.2)
       activesupport (>= 4.2)
-      after_commit_action (~> 1.0)
-    crack (0.4.3)
-      safe_yaml (~> 1.0.0)
-    crass (1.0.5)
-    css_parser (1.7.0)
+    crack (1.0.0)
+      bigdecimal
+      rexml
+    crass (1.0.6)
+    css_parser (1.19.1)
       addressable
-    cucumber (3.1.2)
-      builder (>= 2.1.2)
-      cucumber-core (~> 3.2.0)
-      cucumber-expressions (~> 6.0.1)
-      cucumber-wire (~> 0.0.1)
-      diff-lcs (~> 1.3)
-      gherkin (~> 5.1.0)
-      multi_json (>= 1.7.5, < 2.0)
-      multi_test (>= 0.1.2)
-    cucumber-core (3.2.1)
-      backports (>= 3.8.0)
-      cucumber-tag_expressions (~> 1.1.0)
-      gherkin (~> 5.0)
-    cucumber-expressions (6.0.1)
-    cucumber-rails (1.6.0)
-      capybara (>= 1.1.2, < 4)
-      cucumber (>= 3.0.2, < 4)
-      mime-types (>= 1.17, < 4)
-      nokogiri (~> 1.8)
-      railties (>= 4, < 6)
-    cucumber-tag_expressions (1.1.1)
-    cucumber-wire (0.0.1)
-    daemons (1.3.1)
-    database_cleaner (1.7.0)
-    debug_inspector (0.0.3)
-    delayed_job (4.1.5)
-      activesupport (>= 3.0, < 5.3)
-    delayed_job_active_record (4.1.3)
-      activerecord (>= 3.0, < 5.3)
+    csv (3.3.0)
+    daemons (1.4.1)
+    date (3.4.0)
+    delayed_job (4.1.12)
+      activesupport (>= 3.0, < 8.0)
+    delayed_job_active_record (4.1.10)
+      activerecord (>= 3.0, < 8.0)
       delayed_job (>= 3.0, < 5)
-    descriptive_statistics (2.5.1)
-    devise (4.7.1)
+    device_detector (1.1.3)
+    devise (4.9.4)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
-    diff-lcs (1.3)
-    domain_name (0.5.20180417)
-      unf (>= 0.0.5, < 1.0.0)
-    dotenv (2.7.2)
-    dotenv-rails (2.7.2)
-      dotenv (= 2.7.2)
-      railties (>= 3.2, < 6.1)
+    diff-lcs (1.5.1)
+    domain_name (0.6.20240107)
+    dotenv (2.8.1)
+    dotenv-rails (2.8.1)
+      dotenv (= 2.8.1)
+      railties (>= 3.2)
     eff_matomo (0.2.4)
       activesupport
       httparty
     ejs (1.1.1)
     email_validator (1.6.0)
       activemodel
-    errbase (0.1.1)
-    erubi (1.8.0)
-    erubis (2.7.0)
-    execjs (2.7.0)
-    factory_girl (4.9.0)
-      activesupport (>= 3.0.0)
-    factory_girl_rails (4.9.0)
-      factory_girl (~> 4.9.0)
-      railties (>= 3.0.0)
-    faraday (0.15.4)
-      multipart-post (>= 1.2, < 3)
-    fast_inserter (0.1.6)
+    erubi (1.13.0)
+    excon (1.1.1)
+    execjs (2.10.0)
+    factory_bot (6.5.0)
+      activesupport (>= 5.0.0)
+    factory_bot_rails (6.4.4)
+      factory_bot (~> 6.5)
+      railties (>= 5.0.0)
+    faraday (2.12.0)
+      faraday-net_http (>= 2.0, < 3.4)
+      json
+      logger
+    faraday-net_http (3.3.0)
+      net-http
+    fast_inserter (2.0.0)
       activerecord (>= 4.1.0)
-    fastly (2.3.0)
-    ffi (1.10.0)
-    fontello_rails_converter (0.4.6)
-      activesupport
-      launchy
-      rest-client
-      rubyzip (~> 1.0)
-    friendly_id (5.2.5)
+    fastly (2.5.3)
+    ffi (1.17.0-aarch64-linux-gnu)
+    ffi (1.17.0-aarch64-linux-musl)
+    ffi (1.17.0-arm-linux-gnu)
+    ffi (1.17.0-arm-linux-musl)
+    ffi (1.17.0-arm64-darwin)
+    ffi (1.17.0-x86-linux-gnu)
+    ffi (1.17.0-x86-linux-musl)
+    ffi (1.17.0-x86_64-darwin)
+    ffi (1.17.0-x86_64-linux-gnu)
+    ffi (1.17.0-x86_64-linux-musl)
+    fog-aws (3.29.0)
+      base64 (~> 0.2.0)
+      fog-core (~> 2.6)
+      fog-json (~> 1.1)
+      fog-xml (~> 0.1)
+    fog-core (2.6.0)
+      builder
+      excon (~> 1.0)
+      formatador (>= 0.2, < 2.0)
+      mime-types
+    fog-json (1.2.0)
+      fog-core
+      multi_json (~> 1.10)
+    fog-xml (0.1.4)
+      fog-core
+      nokogiri (>= 1.5.11, < 2.0.0)
+    formatador (1.1.0)
+    friendly_id (5.5.1)
       activerecord (>= 4.0.0)
-    geocoder (1.5.1)
-    gherkin (5.1.0)
-    globalid (0.4.2)
-      activesupport (>= 4.2.0)
+    globalid (1.2.1)
+      activesupport (>= 6.1)
     going_postal (0.1.6)
     gravatar-ultimate (2.0.0)
       activesupport (>= 2.3.14)
       rack
     groupdate (2.5.3)
       activesupport (>= 3)
-    hashdiff (0.3.9)
+    hashdiff (1.1.1)
+    hashie (5.0.0)
     htmlentities (4.3.4)
-    http-cookie (1.0.3)
+    http-accept (1.7.0)
+    http-cookie (1.0.7)
       domain_name (~> 0.5)
     http_accept_language (2.1.1)
-    httparty (0.17.0)
-      mime-types (~> 3.0)
+    httparty (0.22.0)
+      csv
+      mini_mime (>= 1.0.0)
       multi_xml (>= 0.5.2)
-    i18n (1.6.0)
+    i18n (1.14.6)
       concurrent-ruby (~> 1.0)
-    invisible_captcha (0.12.0)
+    image_processing (1.13.0)
+      mini_magick (>= 4.9.5, < 5)
+      ruby-vips (>= 2.0.17, < 3)
+    invisible_captcha (0.13.0)
       rails (>= 3.2.0)
     iso_country_codes (0.7.8)
-    jbuilder (1.5.3)
-      activesupport (>= 3.0.0)
-      multi_json (>= 1.2.0)
-    jmespath (1.4.0)
-    launchy (2.4.3)
-      addressable (~> 2.3)
-    loofah (2.3.1)
+    jbuilder (2.13.0)
+      actionview (>= 5.0.0)
+      activesupport (>= 5.0.0)
+    jmespath (1.6.2)
+    json (2.7.5)
+    language_server-protocol (3.17.0.3)
+    logger (1.6.1)
+    loofah (2.23.1)
       crass (~> 1.0.2)
-      nokogiri (>= 1.5.9)
-    mail (2.7.1)
+      nokogiri (>= 1.12.0)
+    mail (2.8.1)
       mini_mime (>= 0.1.1)
-    method_source (0.9.2)
-    mime-types (3.2.2)
+      net-imap
+      net-pop
+      net-smtp
+    marcel (1.0.4)
+    matrix (0.4.2)
+    method_source (1.1.0)
+    mime-types (3.6.0)
+      logger
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2019.0331)
-    mimemagic (0.3.10)
-      nokogiri (~> 1)
-      rake
-    mini_mime (1.0.2)
-    mini_portile2 (2.4.0)
-    minitest (5.11.3)
-    multi_json (1.13.1)
-    multi_test (0.1.2)
-    multi_xml (0.6.0)
-    multipart-post (2.0.0)
+    mime-types-data (3.2024.1001)
+    mini_magick (4.13.2)
+    mini_mime (1.1.5)
+    minitest (5.25.1)
+    multi_json (1.15.0)
+    multi_xml (0.7.1)
+      bigdecimal (~> 3.1)
+    net-http (0.4.1)
+      uri
+    net-imap (0.5.0)
+      date
+      net-protocol
+    net-pop (0.1.2)
+      net-protocol
+    net-protocol (0.2.2)
+      timeout
+    net-smtp (0.5.0)
+      net-protocol
     netrc (0.11.0)
-    nio4r (2.3.1)
-    nokogiri (1.10.8)
-      mini_portile2 (~> 2.4.0)
-    nokogumbo (1.5.0)
-      nokogiri
-    oauth (0.5.5)
+    nio4r (2.7.4)
+    nokogiri (1.16.7-aarch64-linux)
+      racc (~> 1.4)
+    nokogiri (1.16.7-arm-linux)
+      racc (~> 1.4)
+    nokogiri (1.16.7-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.16.7-x86-linux)
+      racc (~> 1.4)
+    nokogiri (1.16.7-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.16.7-x86_64-linux)
+      racc (~> 1.4)
+    oauth (0.6.2)
+      snaky_hash (~> 2.0)
+      version_gem (~> 1.1)
     orm_adapter (0.5.0)
-    paperclip (5.3.0)
-      activemodel (>= 4.2.0)
-      activesupport (>= 4.2.0)
-      mime-types
-      mimemagic (~> 0.3.0)
-      terrapin (~> 0.6.0)
-    parallel (1.17.0)
-    parser (2.6.3.0)
-      ast (~> 2.4.0)
-    pg (1.1.4)
-    pg_search (2.1.7)
-      activerecord (>= 4.2)
-      activesupport (>= 4.2)
-    poltergeist (1.18.1)
-      capybara (>= 2.1, < 4)
-      cliver (~> 0.3.1)
-      websocket-driver (>= 0.2.0)
-    powerpack (0.1.2)
-    premailer (1.11.1)
+    parallel (1.26.3)
+    parser (3.3.5.1)
+      ast (~> 2.4.1)
+      racc
+    pg (1.5.9)
+    pg_search (2.3.7)
+      activerecord (>= 6.1)
+      activesupport (>= 6.1)
+    premailer (1.27.0)
       addressable
-      css_parser (>= 1.6.0)
+      css_parser (>= 1.19.0)
       htmlentities (>= 4.0.0)
-    premailer-rails (1.10.2)
-      actionmailer (>= 3, < 6)
+    premailer-rails (1.12.0)
+      actionmailer (>= 3)
+      net-smtp
       premailer (~> 1.7, >= 1.7.9)
-    public_suffix (3.1.1)
-    puma (3.12.4)
-    rack (2.0.8)
+    psych (3.3.4)
+    public_suffix (6.0.1)
+    puma (3.12.6)
+    racc (1.8.1)
+    rack (2.2.10)
     rack-attack (5.4.2)
       rack (>= 1.0, < 3)
-    rack-test (0.6.3)
-      rack (>= 1.0)
-    rails (5.0.7.2)
-      actioncable (= 5.0.7.2)
-      actionmailer (= 5.0.7.2)
-      actionpack (= 5.0.7.2)
-      actionview (= 5.0.7.2)
-      activejob (= 5.0.7.2)
-      activemodel (= 5.0.7.2)
-      activerecord (= 5.0.7.2)
-      activesupport (= 5.0.7.2)
-      bundler (>= 1.3.0)
-      railties (= 5.0.7.2)
-      sprockets-rails (>= 2.0.0)
-    rails-assets-EpicEditor (0.2.3)
-    rails-assets-chartjs (2.8.0)
-    rails-assets-congress-images-102x125 (0.1.2)
-    rails-assets-html5shiv (3.7.2)
-    rails-assets-ionicons (2.0.1)
-    rails-assets-jquery (2.1.3)
-    rails-assets-jquery-cookie (1.4.1)
-      rails-assets-jquery (>= 1.2)
-    rails-assets-jquery-timeago (1.6.7)
-      rails-assets-jquery (>= 1.4)
-    rails-assets-jquery-ujs (1.0.3)
-      rails-assets-jquery (> 1.8)
-    rails-assets-lodash (3.7.0)
-    rails-assets-moment (2.9.0)
-    rails-assets-respond (1.4.2)
-    rails-assets-roboto-webfont (0.1.1)
-    rails-assets-sweetalert (1.0.1)
-    rails-controller-testing (1.0.4)
-      actionpack (>= 5.0.1.x)
-      actionview (>= 5.0.1.x)
-      activesupport (>= 5.0.1.x)
-    rails-dev-tweaks (1.2.0)
-      actionpack (>= 3.1)
-      railties (>= 3.1)
-    rails-dom-testing (2.0.3)
-      activesupport (>= 4.2.0)
+    rack-test (2.1.0)
+      rack (>= 1.3)
+    rails (7.0.8.6)
+      actioncable (= 7.0.8.6)
+      actionmailbox (= 7.0.8.6)
+      actionmailer (= 7.0.8.6)
+      actionpack (= 7.0.8.6)
+      actiontext (= 7.0.8.6)
+      actionview (= 7.0.8.6)
+      activejob (= 7.0.8.6)
+      activemodel (= 7.0.8.6)
+      activerecord (= 7.0.8.6)
+      activestorage (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      bundler (>= 1.15.0)
+      railties (= 7.0.8.6)
+    rails-controller-testing (1.0.5)
+      actionpack (>= 5.0.1.rc1)
+      actionview (>= 5.0.1.rc1)
+      activesupport (>= 5.0.1.rc1)
+    rails-dom-testing (2.2.0)
+      activesupport (>= 5.0.0)
+      minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.2.0)
-      loofah (~> 2.2, >= 2.2.2)
-    rails_12factor (0.0.3)
-      rails_serve_static_assets
-      rails_stdout_logging
-    rails_response_headers (0.1.0)
-    rails_serve_static_assets (0.0.5)
-    rails_stdout_logging (0.0.5)
-    railties (5.0.7.2)
-      actionpack (= 5.0.7.2)
-      activesupport (= 5.0.7.2)
+    rails-html-sanitizer (1.6.0)
+      loofah (~> 2.21)
+      nokogiri (~> 1.14)
+    railties (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
       method_source
-      rake (>= 0.8.7)
-      thor (>= 0.18.1, < 2.0)
-    rainbow (3.0.0)
-    rake (12.3.3)
-    rb-fchange (0.0.6)
-      ffi
-    rb-fsevent (0.10.3)
-    rb-inotify (0.10.0)
+      rake (>= 12.2)
+      thor (~> 1.0)
+      zeitwerk (~> 2.5)
+    rainbow (3.1.1)
+    rake (13.2.1)
+    rb-fsevent (0.11.2)
+    rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rdoc (6.1.1)
+    rdoc (6.3.4.1)
     react-rails (1.11.0)
       babel-transpiler (>= 0.7.0)
       connection_pool
       execjs
       railties (>= 3.2)
       tilt
-    redcarpet (3.4.0)
-    referer-parser (0.3.0)
-    regexp_parser (1.6.0)
-    request_store (1.4.1)
-      rack (>= 1.4)
-    responders (3.0.0)
-      actionpack (>= 5.0)
-      railties (>= 5.0)
-    rest-client (2.0.2)
+    redcarpet (3.6.0)
+    regexp_parser (2.9.2)
+    responders (3.1.1)
+      actionpack (>= 5.2)
+      railties (>= 5.2)
+    rest-client (2.1.0)
+      http-accept (>= 1.7.0, < 2.0)
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
-    rspec-core (3.8.0)
-      rspec-support (~> 3.8.0)
-    rspec-expectations (3.8.3)
+    rexml (3.3.9)
+    rouge (4.4.0)
+    rspec-core (3.13.2)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.3)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.8.0)
-    rspec-mocks (3.8.0)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.8.0)
-    rspec-rails (3.8.2)
-      actionpack (>= 3.0)
-      activesupport (>= 3.0)
-      railties (>= 3.0)
-      rspec-core (~> 3.8.0)
-      rspec-expectations (~> 3.8.0)
-      rspec-mocks (~> 3.8.0)
-      rspec-support (~> 3.8.0)
-    rspec-support (3.8.0)
-    rubocop (0.52.0)
+      rspec-support (~> 3.13.0)
+    rspec-rails (6.1.5)
+      actionpack (>= 6.1)
+      activesupport (>= 6.1)
+      railties (>= 6.1)
+      rspec-core (~> 3.13)
+      rspec-expectations (~> 3.13)
+      rspec-mocks (~> 3.13)
+      rspec-support (~> 3.13)
+    rspec-support (3.13.1)
+    rubocop (1.68.0)
+      json (~> 2.3)
+      language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
-      parser (>= 2.4.0.2, < 3.0)
-      powerpack (~> 0.1)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 2.4, < 3.0)
+      rubocop-ast (>= 1.32.2, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (~> 1.0, >= 1.0.1)
-    rubocop-github (0.9.0)
-      rubocop (~> 0.51)
-    ruby-progressbar (1.10.0)
-    rubyzip (1.3.0)
-    safe_yaml (1.0.5)
-    safely_block (0.2.1)
-      errbase
-    sanitize (4.6.6)
+      unicode-display_width (>= 2.4.0, < 3.0)
+    rubocop-ast (1.33.0)
+      parser (>= 3.3.1.0)
+    rubocop-github (0.20.0)
+      rubocop (>= 1.37)
+      rubocop-performance (>= 1.15)
+      rubocop-rails (>= 2.17)
+    rubocop-performance (1.22.1)
+      rubocop (>= 1.48.1, < 2.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
+    rubocop-rails (2.27.0)
+      activesupport (>= 4.2.0)
+      rack (>= 1.1)
+      rubocop (>= 1.52.0, < 2.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
+    ruby-progressbar (1.13.0)
+    ruby-vips (2.2.2)
+      ffi (~> 1.12)
+      logger
+    rubyzip (2.3.2)
+    safely_block (0.4.1)
+    sanitize (6.1.3)
       crass (~> 1.0.2)
-      nokogiri (>= 1.4.4)
-      nokogumbo (~> 1.4)
+      nokogiri (>= 1.12.0)
     sass (3.7.4)
       sass-listen (~> 4.0.0)
     sass-listen (4.0.0)
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
-    sass-rails (5.0.7)
-      railties (>= 4.0.0, < 6)
+    sass-rails (5.0.8)
+      railties (>= 5.2.0)
       sass (~> 3.1)
       sprockets (>= 2.8, < 4.0)
       sprockets-rails (>= 2.0, < 4.0)
       tilt (>= 1.1, < 3)
-    sassc (2.0.1)
+    sassc (2.4.0)
       ffi (~> 1.9)
-      rake
-    sdoc (1.0.0)
+    sdoc (2.6.1)
       rdoc (>= 5.0)
-    select2-rails (4.0.3)
-      thor (~> 0.14)
-    selenium-webdriver (3.142.4)
-      childprocess (>= 0.5, < 3.0)
-      rubyzip (~> 1.2, >= 1.2.2)
-    sentry-raven (0.15.6)
-      faraday (>= 0.7.6)
-    sprockets (3.7.2)
+    select2-rails (4.0.13)
+    selenium-devtools (0.130.0)
+      selenium-webdriver (~> 4.2)
+    selenium-webdriver (4.26.0)
+      base64 (~> 0.2)
+      logger (~> 1.4)
+      rexml (~> 3.2, >= 3.2.5)
+      rubyzip (>= 1.2.2, < 3.0)
+      websocket (~> 1.0)
+    sentry-raven (3.1.2)
+      faraday (>= 1.0)
+    snaky_hash (2.0.1)
+      hashie
+      version_gem (~> 1.1, >= 1.1.1)
+    sprockets (3.7.5)
+      base64
       concurrent-ruby (~> 1.0)
       rack (> 1, < 3)
-    sprockets-image_compressor (0.3.0)
-      sprockets
-    sprockets-rails (3.2.1)
-      actionpack (>= 4.0)
-      activesupport (>= 4.0)
+    sprockets-rails (3.5.2)
+      actionpack (>= 6.1)
+      activesupport (>= 6.1)
       sprockets (>= 3.0.0)
-    terrapin (0.6.0)
-      climate_control (>= 0.0.3, < 1.0)
-    thor (0.20.3)
-    thread_safe (0.3.6)
-    tilt (2.0.9)
-    tzinfo (1.2.5)
-      thread_safe (~> 0.1)
-    uglifier (4.1.20)
+    ssrf_filter (1.1.2)
+    thor (1.3.2)
+    tilt (2.4.0)
+    timeout (0.4.1)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
+    uglifier (4.2.1)
       execjs (>= 0.3.0, < 3)
-    unf (0.1.4)
-      unf_ext
-    unf_ext (0.0.7.6)
-    unicode-display_width (1.5.0)
-    user_agent_parser (2.6.0)
-    uuidtools (2.1.5)
-    warden (1.2.4)
-      rack (>= 1.0)
-    webdrivers (4.1.2)
-      nokogiri (~> 1.6)
-      rubyzip (~> 1.0)
-      selenium-webdriver (>= 3.0, < 4.0)
-    webmock (2.3.2)
-      addressable (>= 2.3.6)
+    unicode-display_width (2.6.0)
+    uri (0.13.1)
+    uuidtools (2.2.0)
+    version_gem (1.1.4)
+    warden (1.2.9)
+      rack (>= 2.0.9)
+    webmock (3.24.0)
+      addressable (>= 2.8.0)
       crack (>= 0.3.2)
-      hashdiff
-    webshims-rails (1.16.0)
-      rails (> 3.1.0)
-    websocket-driver (0.6.5)
+      hashdiff (>= 0.4.0, < 2.0.0)
+    webrick (1.9.0)
+    websocket (1.2.11)
+    websocket-driver (0.7.6)
       websocket-extensions (>= 0.1.0)
-    websocket-extensions (0.1.3)
+    websocket-extensions (0.1.5)
     whenever (0.11.0)
       chronic (>= 0.6.3)
-    will_paginate (3.1.7)
-    xmlrpc (0.3.0)
+    will_paginate (3.3.1)
+    xmlrpc (0.3.3)
+      webrick
     xpath (3.2.0)
       nokogiri (~> 1.8)
+    zeitwerk (2.7.1)
 
 PLATFORMS
-  ruby
+  aarch64-linux
+  aarch64-linux-gnu
+  aarch64-linux-musl
+  arm-linux
+  arm-linux-gnu
+  arm-linux-musl
+  arm64-darwin
+  x86-linux
+  x86-linux-gnu
+  x86-linux-musl
+  x86_64-darwin
+  x86_64-linux-gnu
+  x86_64-linux-musl
 
 DEPENDENCIES
-  activerecord-session_store (~> 1)
-  acts_as_paranoid!
-  ahoy_matey (~> 1.6)
-  aws-sdk (~> 2.3)
-  aws-sdk-rails (~> 1)
+  activerecord-session_store (~> 2.1.0)
+  acts_as_paranoid (~> 0.7)
+  ahoy_matey (~> 4.0)
+  aws-sdk-rails (~> 2)
+  aws-sdk-s3 (~> 1)
   better_errors (~> 2)
-  binding_of_caller (~> 0)
   bootstrap-daterangepicker-rails (~> 3)
   bootstrap-sass (~> 3.4)
   bourbon (~> 3)
   bundler (>= 1.8.4)
   byebug
-  capybara (~> 3.26)
+  capybara (~> 3)
+  carrierwave (~> 3.0)
   chartkick (~> 3)
   cocoon (~> 1)
   counter_culture (~> 2.0)
-  cucumber-rails (= 1.6.0)
   daemons (~> 1)
-  database_cleaner (~> 1)
   delayed_job_active_record (~> 4)
-  descriptive_statistics (~> 2)
   devise (~> 4.7)
   dotenv-rails (~> 2)
   eff_matomo (~> 0.2.4)
   ejs (~> 1)
   email_validator (~> 1)
-  factory_girl_rails (~> 4)
-  fast_inserter (~> 0.1)
+  factory_bot_rails (~> 6.2)
+  fast_inserter (~> 2.0)
   fastly (~> 2)
-  fontello_rails_converter (~> 0)
+  fog-aws
   friendly_id (~> 5.0)
   going_postal (~> 0)
   gravatar-ultimate (~> 2)
@@ -520,17 +593,16 @@ DEPENDENCIES
   http_accept_language (~> 2)
   invisible_captcha (~> 0)
   iso_country_codes (~> 0)
-  jbuilder (~> 1.2)
+  jbuilder (~> 2)
   nokogiri (~> 1)
   oauth (~> 0)
-  paperclip (~> 5.2)
   pg (~> 1.1)
-  pg_search
-  poltergeist (~> 1)
+  pg_search (~> 2)
   premailer-rails (~> 1)
+  psych (< 4)
   puma (~> 3)
   rack-attack (~> 5)
-  rails (~> 5.0)
+  rails (~> 7.0.0)
   rails-assets-EpicEditor (~> 0)!
   rails-assets-chartjs (~> 2)!
   rails-assets-congress-images-102x125!
@@ -546,34 +618,27 @@ DEPENDENCIES
   rails-assets-roboto-webfont (~> 0)!
   rails-assets-sweetalert (= 1.0.1)!
   rails-controller-testing
-  rails-dev-tweaks (~> 1.1)
-  rails_12factor
-  rails_response_headers (~> 0)
-  rb-fchange (~> 0)
-  rb-fsevent (~> 0)
-  rb-inotify (~> 0)
+  rails_response_headers!
   react-rails (~> 1)
   redcarpet (~> 3)
   rest-client (~> 2)
-  rspec-core (~> 3)
-  rspec-rails (~> 3)
-  rubocop (= 0.52.0)
-  rubocop-github (= 0.9.0)
-  sanitize (~> 4)
-  sass-rails (~> 5.0)
+  rspec-rails (~> 6.1)
+  rubocop
+  rubocop-github (~> 0.16)
+  rubocop-performance
+  rubocop-rails
+  sanitize (~> 6)
+  sass-rails (< 5.1)
   sdoc
   select2-rails
-  selenium-webdriver (~> 3)
-  sentry-raven (~> 0.15)
-  sprockets-image_compressor (~> 0)
+  selenium-devtools
+  sentry-raven (~> 3.1.2)
   uglifier (>= 1.3.0)
-  warden (= 1.2.4)
-  webdrivers (~> 4)
-  webmock (~> 2)
-  webshims-rails (~> 1)
+  uuidtools (~> 2)
+  webmock (~> 3)
   whenever (~> 0)
   will_paginate (~> 3.0)
-  xmlrpc
+  xmlrpc (~> 0.3)
 
 BUNDLED WITH
-   2.0.1
+   2.5.22
diff --git a/README.md b/README.md
index 526985ac8..94891733d 100644
--- a/README.md
+++ b/README.md
@@ -31,6 +31,10 @@ Follow these instructions to run the Action Center using Docker (recommended). T
   * Allows users to submit e-messages to congress
 * [Call Congress](https://github.com/EFForg/call-congress) url and API key
   * Connects calls between citizens and their congress person using the Twilio API
+* [Google Civic Information API](https://developers.google.com/civic-information) url and API key
+  * Representative information powered by the Civic Information API
+  * We use this when we need to give a user the ability to find their representatives to complete a state-level email action
+  * Some key limitations: https://developers.google.com/civic-information/docs/data_guidelines?hl=en e.g. "Developer’s using the API should make every effort to ensure all users are met with the same experience. We do not allow holdbacks, A/B testing, or similar experiments."
 
 
 ## Using the Action Center
diff --git a/Rakefile b/Rakefile
index 506551c8a..4afe39994 100644
--- a/Rakefile
+++ b/Rakefile
@@ -1,14 +1,14 @@
 # Add your own tasks in files placed in lib/tasks ending in .rake,
 # for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
 
-require File.expand_path("../config/application", __FILE__)
+require File.expand_path("config/application", __dir__)
 
 Actioncenter::Application.load_tasks
 
-if %w(development test).include? Rails.env
+if %w[development test].include? Rails.env
   require "rubocop/rake_task"
   RuboCop::RakeTask.new
 
   task(:default).clear
-  task default: [:sass_lint, :rubocop, :spec, :cucumber]
+  task default: %i[sass_lint rubocop spec cucumber]
 end
diff --git a/public/images/email-top-banner.png b/app/assets/images/email-top-banner.png
similarity index 100%
rename from public/images/email-top-banner.png
rename to app/assets/images/email-top-banner.png
diff --git a/public/images/share-on-email-thin.png b/app/assets/images/share-on-email-thin.png
similarity index 100%
rename from public/images/share-on-email-thin.png
rename to app/assets/images/share-on-email-thin.png
diff --git a/public/images/share-on-fb-thin.png b/app/assets/images/share-on-fb-thin.png
similarity index 100%
rename from public/images/share-on-fb-thin.png
rename to app/assets/images/share-on-fb-thin.png
diff --git a/public/images/share-on-fb.png b/app/assets/images/share-on-fb.png
similarity index 100%
rename from public/images/share-on-fb.png
rename to app/assets/images/share-on-fb.png
diff --git a/public/images/share-on-g-thin.png b/app/assets/images/share-on-g-thin.png
similarity index 100%
rename from public/images/share-on-g-thin.png
rename to app/assets/images/share-on-g-thin.png
diff --git a/public/images/share-on-g.png b/app/assets/images/share-on-g.png
similarity index 100%
rename from public/images/share-on-g.png
rename to app/assets/images/share-on-g.png
diff --git a/public/images/share-on-tw-thin.png b/app/assets/images/share-on-tw-thin.png
similarity index 100%
rename from public/images/share-on-tw-thin.png
rename to app/assets/images/share-on-tw-thin.png
diff --git a/public/images/share-on-tw.png b/app/assets/images/share-on-tw.png
similarity index 100%
rename from public/images/share-on-tw.png
rename to app/assets/images/share-on-tw.png
diff --git a/app/assets/javascripts/admin.js b/app/assets/javascripts/admin.js
index a3cf8d238..118f8643c 100644
--- a/app/assets/javascripts/admin.js
+++ b/app/assets/javascripts/admin.js
@@ -8,6 +8,7 @@
 //= require admin/gallery
 //= require admin/action_pages
 //= require admin/action_pages/petition-targets
+//= require admin/action_pages/email
 //= require admin/analytics
 //= require_tree ./admin/components
 
diff --git a/app/assets/javascripts/admin/action_pages/email.js b/app/assets/javascripts/admin/action_pages/email.js
new file mode 100644
index 000000000..fdb5167cc
--- /dev/null
+++ b/app/assets/javascripts/admin/action_pages/email.js
@@ -0,0 +1,15 @@
+$(document).ready(function() {
+  var stateLevelTarget = $("#action_page_email_campaign_attributes_state");
+  var stateLevelTargetSelection = $("#state-level-target-selection");
+
+  if (stateLevelTarget.val() === "")
+    stateLevelTargetSelection.hide();
+
+  stateLevelTarget.on("change", function() {
+    if (stateLevelTarget.val() !== "")
+      stateLevelTargetSelection.show();
+    else
+      stateLevelTargetSelection.hide();
+  });
+});
+
diff --git a/app/assets/javascripts/application/gallery.js b/app/assets/javascripts/application/gallery.js
index 92ead348d..1e0699e6a 100644
--- a/app/assets/javascripts/application/gallery.js
+++ b/app/assets/javascripts/application/gallery.js
@@ -24,9 +24,9 @@ $(function() {
     });
   }
 
-  attachGalleryImage('#image-gallery', '#action_page_featured_image', '#attached-featured_image');
-  attachGalleryImage('#image-gallery', '#action_page_background_image', '#attached-background_image');
-  attachGalleryImage('#image-gallery', '#action_page_og_image', '#attached-og_image');
+  attachGalleryImage('#image-gallery', '#action_page_remote_featured_image_url', '#attached-featured_image');
+  attachGalleryImage('#image-gallery', '#action_page_remote_background_image_url', '#attached-background_image');
+  attachGalleryImage('#image-gallery', '#action_page_remote_og_image_url', '#attached-og_image');
 
   $('.tweet-target').each(function(i, target) {
     attachGalleryImage('#image-gallery', $(target).find('.image-input'), target);
diff --git a/app/assets/javascripts/application/tools/congress_message.js b/app/assets/javascripts/application/tools/congress_message.js
index c1c155291..7539e0b33 100644
--- a/app/assets/javascripts/application/tools/congress_message.js
+++ b/app/assets/javascripts/application/tools/congress_message.js
@@ -105,23 +105,4 @@ $(document).on("ready", function() {
     e.preventDefault();
     $('#customize-message .notice').addClass('down');
   });
-
-  function show_progress_bars() {
-    $(".progress-striped").show();
-    $("#tools :submit").hide();
-    $("#tools input,textarea,button,select", $(this)).attr("disabled", "disabled");
-  }
-
-  function show_error(error, form) {
-    $(".progress-striped").hide();
-    form.find(":submit").show();
-    form.find(".alert-danger").remove();
-    $("#errors").append($('<div class="small alert alert-danger help-block">').text(error));
-    $("#tools input,textarea,button,select", form).removeAttr("disabled");
-  }
-
-  function update_tabs(from, to) {
-    $(".page-indicator div.page" + from).removeClass('active');
-    $(".page-indicator div.page" + to).addClass('active');
-  }
 });
diff --git a/app/assets/javascripts/application/tools/email.js.erb b/app/assets/javascripts/application/tools/email.js.erb
index 7159ed624..9a240425a 100644
--- a/app/assets/javascripts/application/tools/email.js.erb
+++ b/app/assets/javascripts/application/tools/email.js.erb
@@ -8,8 +8,29 @@ $(document).on('ready', function() {
       dnt = true;
     }, 0);
   });
+
   $('#target-email button').on('click', function() {
     $('.thank-you').show();
     $('#email-tool').hide();
   });
+
+  $(".state-rep-email").hide();
+
+  $("form.state-rep-lookup").on("ajax:complete", function(e, xhr, status) {
+    var $form = $(this);
+    var data = xhr.responseJSON;
+    $('.state-rep-lookup').hide();
+    $('.state-reps').replaceWith(data.content);
+    if (status == "success") {
+      $form.remove();
+      $(".state-reps").html(data);
+
+      if ($("#action-content").length) {
+        $(window).scrollTop( $("#action-content").offset().top ); // go to top of page if on action center site
+      }
+      update_tabs(1, 2);
+    } else {
+      show_error("Something went wrong. Please try again later.", $form);
+    }
+  });
 });
diff --git a/app/assets/javascripts/application/tools/shared.js b/app/assets/javascripts/application/tools/shared.js
new file mode 100644
index 000000000..97d07e676
--- /dev/null
+++ b/app/assets/javascripts/application/tools/shared.js
@@ -0,0 +1,18 @@
+function show_progress_bars() {
+  $(".progress-striped").show();
+  $("#tools :submit").hide();
+  $("#tools input,textarea,button,select", $(this)).attr("disabled", "disabled");
+}
+
+function show_error(error, form) {
+  $(".progress-striped").hide();
+  form.find(":submit").show();
+  form.find(".alert-danger").remove();
+  $("#errors").append($('<div class="small alert alert-danger help-block">').text(error));
+  $("#tools input,textarea,button,select", form).removeAttr("disabled");
+}
+
+function update_tabs(from, to) {
+  $(".page-indicator div.page" + from).removeClass('active');
+  $(".page-indicator div.page" + to).addClass('active');
+}
\ No newline at end of file
diff --git a/app/assets/stylesheets/action_page.scss b/app/assets/stylesheets/action_page.scss
index 6ace3a726..7a30dde8c 100644
--- a/app/assets/stylesheets/action_page.scss
+++ b/app/assets/stylesheets/action_page.scss
@@ -1236,25 +1236,6 @@ html.js #affiliations {
   }
 }
 
-.partner-logos {
-  display: flex;
-  align-items: center;
-  justify-content: space-evenly;
-  flex-wrap: wrap;
-  @media screen and (min-width: $lg) {
-    flex-wrap: nowrap;
-  }
-  img {
-    width: 100%;
-    height: auto;
-    max-width: 200px;
-    padding: 1em;
-    @media screen and (min-width: $md) {
-      padding: 0 1em;
-    }
-  }
-}
-
 #congress-message-create {
   position: relative;
 
diff --git a/app/controllers/action_page_controller.rb b/app/controllers/action_page_controller.rb
index 8daf812f5..d1612a1aa 100644
--- a/app/controllers/action_page_controller.rb
+++ b/app/controllers/action_page_controller.rb
@@ -5,15 +5,15 @@ class ActionPageController < ApplicationController
                 :protect_unpublished,
                 :redirect_to_specified_url,
                 :redirect_from_archived_to_active_action,
-                only: [:show, :show_by_institution, :embed_iframe,
-                       :signature_count, :filter]
+                only: %i[show show_by_institution embed_iframe
+                         signature_count filter]
   before_action :redirect_to_cannonical_slug, only: [:show]
-  before_action :set_institution, only: [:show_by_institution, :filter]
-  before_action :set_action_display_variables, only: [:show,
-                                                      :show_by_institution,
-                                                      :embed_iframe,
-                                                      :signature_count,
-                                                      :filter]
+  before_action :set_institution, only: %i[show_by_institution filter]
+  before_action :set_action_display_variables, only: %i[show
+                                                        show_by_institution
+                                                        embed_iframe
+                                                        signature_count
+                                                        filter]
 
   skip_before_action :verify_authenticity_token, only: :embed
 
@@ -26,9 +26,9 @@ def show
   end
 
   def index
-    @actionPages = ActionPage.where(published: true, archived: false, victory: false).
-      paginate(page: params[:page], per_page: 9).
-      order(created_at: :desc)
+    @actionPages = ActionPage.where(published: true, archived: false, victory: false)
+                             .paginate(page: params[:page], per_page: 9)
+                             .order(created_at: :desc)
 
     @actionPages = @actionPages.categorized(params[:category]) if params[:category].present?
 
@@ -51,10 +51,10 @@ def embed_iframe
   def signature_count
     @actionPage = ActionPage.friendly.find(params[:id])
 
-    if petition = @actionPage.petition
-      render text: petition.signatures.count
+    if @actionPage.petition
+      render body: @actionPage.petition.signatures.count
     else
-      render text: "0"
+      render body: "0"
     end
   end
 
@@ -83,18 +83,14 @@ def protect_unpublished
   end
 
   def redirect_to_specified_url
-    if @actionPage.enable_redirect
-      redirect_to @actionPage.redirect_url, status: 301
-    end
+    redirect_to @actionPage.redirect_url, status: 301, allow_other_host: true if @actionPage.enable_redirect
   end
 
   def redirect_from_archived_to_active_action
-    if @actionPage.redirect_from_archived_to_active_action?
-      # Users can access actions they've taken in the past as a historical record
-      unless current_user and (current_user.taken_action? @actionPage or current_user.admin?)
-        redirect_to @actionPage.active_action_page_for_redirect
-      end
-    end
+    return unless @actionPage.redirect_from_archived_to_active_action?
+    return if current_user&.can_view_archived?(@actionPage)
+
+    redirect_to @actionPage.active_action_page_for_redirect
   end
 
   def redirect_to_cannonical_slug
diff --git a/app/controllers/admin/action_pages_controller.rb b/app/controllers/admin/action_pages_controller.rb
index 5045b8f7a..7f11f6eed 100644
--- a/app/controllers/admin/action_pages_controller.rb
+++ b/app/controllers/admin/action_pages_controller.rb
@@ -2,34 +2,32 @@ class Admin::ActionPagesController < Admin::ApplicationController
   include DateRange
   include ActionPageDisplay
 
-  before_action :set_action_page, only: [
-    :edit,
-    :update,
-    :destroy,
-    :events,
-    :events_table,
-    :duplicate,
-    :preview,
-    :status,
-    :edit_partners
+  before_action :set_action_page, only: %i[
+    edit
+    update
+    destroy
+    events
+    events_table
+    duplicate
+    preview
+    status
+    edit_partners
   ]
 
-  before_action :set_petition_targets, only: %i(new edit duplicate)
-  before_action :set_partners, only: %i(new edit duplicate)
-  before_action :set_source_files, only: %i(new edit create update duplicate)
+  before_action :set_petition_targets, only: %i[new edit duplicate]
+  before_action :set_partners, only: %i[new edit duplicate]
+  before_action :set_source_files, only: %i[new edit create update duplicate]
 
-  after_action :purge_cache, only: [:update, :publish]
+  after_action :purge_cache, only: %i[update publish]
 
   allow_collaborators_to :index, :edit
 
   def index
-    @categories = Category.all.order(:title)
+    @categories = Category.order(:title)
     @authors = User.authors.order(:last_name)
     @actionPages = filter_action_pages
 
-    if request.xhr?
-      render partial: "admin/action_pages/index"
-    end
+    render partial: "admin/action_pages/index" if request.xhr?
   end
 
   def new
@@ -64,26 +62,19 @@ def edit
     @actionPage.email_campaign ||= EmailCampaign.new
     @actionPage.congress_message_campaign ||= CongressMessageCampaign.new
     10.times { @actionPage.affiliation_types.build }
-    if @actionPage.enable_petition && @actionPage.petition.enable_affiliations
-      @target_category = @actionPage.institutions.first.category
-    end
+    @target_category = @actionPage.institutions.first.category if @actionPage.enable_petition && @actionPage.petition.enable_affiliations
   end
 
-  def status
-  end
+  def status; end
 
   def edit_partners
     @partners = Partner.order(name: :desc)
   end
 
   def update
-    @actionPage.background_image = nil if params[:destroy_background_image]
-    @actionPage.featured_image   = nil if params[:destroy_featured_image]
-    @actionPage.og_image         = nil if params[:destroy_og_image]
-
-    @actionPage.update_attributes(action_page_params)
+    @actionPage.update(action_page_params)
     if (institutions_params[:reset] && institutions_params[:reset] == "1") ||
-        (institutions_params[:category] && @actionPage.institutions.empty?)
+       (institutions_params[:category] && @actionPage.institutions.empty?)
       ActionInstitution.add(action_page: @actionPage,
                             **institutions_params.to_h.symbolize_keys)
     end
@@ -96,12 +87,11 @@ def destroy
     redirect_to admin_action_pages_path, notice: "Deleted action page: #{@actionPage.title}"
   end
 
-
   def preview
     @actionPage.attributes = action_page_params
 
     if @actionPage.enable_redirect
-        redirect_to @actionPage.redirect_url, status: 301
+      redirect_to @actionPage.redirect_url, status: 301
       return
     end
 
@@ -132,9 +122,9 @@ def events
       end
       format.json do
         render json: @events.chart_data(
-                 type: params[:type],
-                 range: @start_date..@end_date
-               )
+          type: params[:type],
+          range: @start_date..@end_date
+        )
       end
     end
   end
@@ -144,9 +134,7 @@ def events_table
     @events = @actionPage.events.in_range(@start_date, @end_date)
     @counts = @events.table_data
     @summary = @events.summary
-    if @actionPage.enable_congress_message?
-      @fills = @actionPage.congress_message_campaign.date_fills(@start_date, @end_date)
-    end
+    @fills = @actionPage.congress_message_campaign.date_fills(@start_date, @end_date) if @actionPage.enable_congress_message?
   end
 
   def homepage
@@ -183,25 +171,26 @@ def set_partners
 
   def action_page_params
     params.require(:action_page).permit(
-      :title, :summary, :description, :category_id, :related_content_url, :featured_image,
+      :title, :summary, :description, :category_id, :related_content_url, :remote_featured_image_url,
       :enable_call, :enable_petition, :enable_email, :enable_tweet,
-      :enable_congress_message, :og_title, :og_image, :share_message, :published,
+      :enable_congress_message, :og_title, :remote_og_image_url, :share_message, :published,
       :call_campaign_id, :what_to_say, :redirect_url, :email_text, :enable_redirect,
       :victory, :victory_message, :archived_redirect_action_page_id, :archived, :status,
       partner_ids: [],
-      action_page_images_attributes: [:id, :action_page_image],
-      call_campaign_attributes: [:id, :title, :message, :call_campaign_id],
-      petition_attributes: [:id, :title, :description, :goal, :enable_affiliations],
-      affiliation_types_attributes: [:id, :name],
+      action_page_images_attributes: %i[id action_page_image],
+      call_campaign_attributes: %i[id title message call_campaign_id],
+      petition_attributes: %i[id title description goal enable_affiliations],
+      affiliation_types_attributes: %i[id name],
       tweet_attributes: [
         :id, :target, :target_house, :target_senate, :message, :cta, :bioguide_id,
-        tweet_targets_attributes: [:id, :_destroy, :twitter_id, :image]
+        { tweet_targets_attributes: %i[id _destroy twitter_id image] }
       ],
-      email_campaign_attributes: [
-        :id, :message, :subject, :target_house, :target_senate, :target_email,
-        :email_addresses, :target_bioguide_id, :bioguide_id, :alt_text_email_your_rep,
-        :alt_text_look_up_your_rep, :alt_text_extra_fields_explain, :topic_category_id,
-        :alt_text_look_up_helper, :alt_text_customize_message_helper, :campaign_tag
+      email_campaign_attributes: %i[
+        id message subject state target_state_lower_chamber target_state_upper_chamber
+        target_governor target_email email_addresses target_bioguide_id
+        bioguide_id alt_text_email_your_rep alt_text_look_up_your_rep
+        alt_text_extra_fields_explain topic_category_id alt_text_look_up_helper
+        alt_text_customize_message_helper campaign_tag
       ],
       congress_message_campaign_attributes: [
         :id, :message, :subject, :target_house, :target_senate, { target_bioguide_list: [] },
@@ -210,18 +199,19 @@ def action_page_params
         :alt_text_customize_message_helper, :campaign_tag,
         :enable_customization_notice
       ],
-      partnerships_attributes: [:id, :enable_mailings]
+      partnerships_attributes: %i[id enable_mailings]
     )
   end
 
   def institutions_params
-    return {} unless params.has_key? :institutions
-    params.require(:institutions).permit(%i(category reset))
+    return {} unless params.key? :institutions
+
+    params.require(:institutions).permit(%i[category reset])
   end
 
   def filter_params
     params.permit(:q, :date_range, :utf8,
-                  action_filters: %i(type status author category))
+                  action_filters: %i[type status author category])
   end
 
   def purge_cache
diff --git a/app/controllers/admin/application_controller.rb b/app/controllers/admin/application_controller.rb
index 3eedde808..fee652024 100644
--- a/app/controllers/admin/application_controller.rb
+++ b/app/controllers/admin/application_controller.rb
@@ -6,25 +6,19 @@ def manifest
     self.class.manifest || "admin"
   end
 
-  protected
-
+  # FLAG_AS_UNUSED
   def self.allow_collaborators_to(*actions)
     skip_before_action :must_be_admin, only: actions
     before_action :must_be_admin_or_collaborator, only: actions
   end
 
   def must_be_admin
-    unless user_signed_in? && current_user.admin?
-      raise ActiveRecord::RecordNotFound
-    end
+    raise ActiveRecord::RecordNotFound unless user_signed_in? && current_user.admin?
   end
 
   def must_be_admin_or_collaborator
-    unless user_signed_in? && (current_user.admin? || current_user.collaborator?)
-      raise ActiveRecord::RecordNotFound
-    end
+    raise ActiveRecord::RecordNotFound unless user_signed_in? && (current_user.admin? || current_user.collaborator?)
   end
 
-  def images
-  end
+  def images; end
 end
diff --git a/app/controllers/admin/congress_message_campaigns_controller.rb b/app/controllers/admin/congress_message_campaigns_controller.rb
index 492ac7fd0..78360652d 100644
--- a/app/controllers/admin/congress_message_campaigns_controller.rb
+++ b/app/controllers/admin/congress_message_campaigns_controller.rb
@@ -3,8 +3,7 @@ class Admin::CongressMessageCampaignsController < Admin::ApplicationController
 
   allow_collaborators_to :congress_tabulation, :staffer_report
 
-  def congress_tabulation
-  end
+  def congress_tabulation; end
 
   def staffer_report
     @bioguide_id = params[:bioguide_id]
diff --git a/app/controllers/admin/events_controller.rb b/app/controllers/admin/events_controller.rb
index 3bd605300..97b29d105 100644
--- a/app/controllers/admin/events_controller.rb
+++ b/app/controllers/admin/events_controller.rb
@@ -6,12 +6,12 @@ def index
     @events = Ahoy::Event.all.in_range(@start_date, @end_date)
     respond_to do |format|
       format.html { @summary = @events.summary }
-      format.json {
+      format.json do
         render json: @events.chart_data(
-                 type: params[:type],
-                 range: @start_date..@end_date
-               )
-      }
+          type: params[:type],
+          range: @start_date..@end_date
+        )
+      end
     end
   end
 end
diff --git a/app/controllers/admin/images_controller.rb b/app/controllers/admin/images_controller.rb
index d89edf4a7..774771fc9 100644
--- a/app/controllers/admin/images_controller.rb
+++ b/app/controllers/admin/images_controller.rb
@@ -1,4 +1,3 @@
 class Admin::ImagesController < Admin::ApplicationController
-  def index
-  end
+  def index; end
 end
diff --git a/app/controllers/admin/institutions_controller.rb b/app/controllers/admin/institutions_controller.rb
index 6b6c0a563..ca2783305 100644
--- a/app/controllers/admin/institutions_controller.rb
+++ b/app/controllers/admin/institutions_controller.rb
@@ -1,13 +1,11 @@
 class Admin::InstitutionsController < Admin::ApplicationController
-  before_action :set_institution, only: %i(destroy edit update)
-  before_action :set_categories, only: %i(new edit upload index)
+  before_action :set_institution, only: %i[destroy edit update]
+  before_action :set_categories, only: %i[new edit upload index]
 
   def index
-    @institutions = Institution.includes(:action_pages).all.order(created_at: :desc)
+    @institutions = Institution.includes(:action_pages).order(created_at: :desc)
     @institutions = @institutions.search(params[:q]) if params[:q].present?
-    if params[:category].present? && params[:category] != "All"
-      @institutions = @institutions.where(category: params[:category])
-    end
+    @institutions = @institutions.where(category: params[:category]) if params[:category].present? && params[:category] != "All"
     @institutions = @institutions.paginate(page: params[:page], per_page: 20)
   end
 
@@ -42,11 +40,7 @@ def import
     if names.empty?
       redirect_to action: "upload", notice: "Import failed. Please check CSV formatting"
     else
-      category = if import_params[:new_category].blank?
-                   import_params[:category]
-                 else
-                   import_params[:new_category]
-                 end
+      category = import_params[:new_category].presence || import_params[:category]
       Institution.delay.import(category, names)
       redirect_to action: "index", notice: "Successfully imported #{names.length} targets"
     end
diff --git a/app/controllers/admin/partners_controller.rb b/app/controllers/admin/partners_controller.rb
index d3bb7080b..3fce9ce28 100644
--- a/app/controllers/admin/partners_controller.rb
+++ b/app/controllers/admin/partners_controller.rb
@@ -1,7 +1,7 @@
 class Admin::PartnersController < Admin::ApplicationController
   layout "admin"
 
-  before_action :set_partner, only: %i(edit update show destroy)
+  before_action :set_partner, only: %i[edit update show destroy]
 
   # GET /partners
   # GET /partners.json
@@ -22,16 +22,15 @@ def create
     respond_to do |format|
       if @partner.save
         format.html { redirect_to @partner, notice: "Partner was successfully created." }
-        format.json { render "show", status: :created, location: @partner }
+        format.json { render "show", status: 201, location: @partner }
       else
         format.html { render "new" }
-        format.json { render json: @partner.errors, status: :unprocessable_entity }
+        format.json { render json: @partner.errors, status: 422 }
       end
     end
   end
 
-  def edit
-  end
+  def edit; end
 
   def update
     if @partner.update(partner_params)
diff --git a/app/controllers/admin/petitions_controller.rb b/app/controllers/admin/petitions_controller.rb
index 331e767dd..1fde4420d 100644
--- a/app/controllers/admin/petitions_controller.rb
+++ b/app/controllers/admin/petitions_controller.rb
@@ -1,5 +1,5 @@
-include PetitionHelper
 class Admin::PetitionsController < Admin::ApplicationController
+  include PetitionHelper
   before_action :set_petition
 
   allow_collaborators_to :show, :destroy_signatures
@@ -25,8 +25,8 @@ def affiliation_csv
     signatures = @petition.signatures
 
     if params[:institution_id].present?
-      signatures = signatures.joins(affiliations: :institution).
-                     where(institutions: { id: params[:institution_id] })
+      signatures = signatures.joins(affiliations: :institution)
+                             .where(institutions: { id: params[:institution_id] })
     end
 
     send_data signatures.to_affiliation_csv,
@@ -36,9 +36,7 @@ def affiliation_csv
   def destroy_signatures
     @petition.signatures.where(id: params[:signature_ids]).delete_all
 
-    if params[:page].to_i > filtered_signatures.total_pages
-      params[:page] = filtered_signatures.total_pages
-    end
+    params[:page] = filtered_signatures.total_pages if params[:page].to_i > filtered_signatures.total_pages
 
     redirect_to admin_action_page_petition_path(@petition.action_page,
                                                 @petition, search_params)
@@ -51,10 +49,10 @@ def set_petition
   end
 
   def filtered_signatures
-    @petition.signatures.
-      filter(params[:query]).
-      order(created_at: :desc).
-      paginate(page: params[:page], per_page: params[:per_page] || 10)
+    @petition.signatures
+             .search(params[:query])
+             .order(created_at: :desc)
+             .paginate(page: params[:page], per_page: params[:per_page] || 10)
   end
 
   def search_params
diff --git a/app/controllers/admin/s3_uploads_controller.rb b/app/controllers/admin/s3_uploads_controller.rb
index 78bca4f4b..5e80050c1 100644
--- a/app/controllers/admin/s3_uploads_controller.rb
+++ b/app/controllers/admin/s3_uploads_controller.rb
@@ -2,11 +2,11 @@ class Admin::S3UploadsController < Admin::ApplicationController
   # GET /admin/source_files
   # GET /admin/source_files.json
   def index
-    if params[:f].present?
-      source_files = SourceFile.where("LOWER(file_name) LIKE ?", "%#{params[:f]}%".downcase)
-    else
-      source_files = SourceFile.limit(3)
-    end
+    source_files = if params[:f].present?
+                     SourceFile.where("LOWER(file_name) LIKE ?", "%#{params[:f]}%".downcase)
+                   else
+                     SourceFile.limit(3)
+                   end
 
     source_files = source_files.order(created_at: :desc)
 
@@ -22,15 +22,15 @@ def create
     @source_file = SourceFile.new(parameters)
     respond_to do |format|
       if @source_file.save
-        format.html {
+        format.html do
           render json: @source_file.to_jq_upload,
-          content_type: "text/html",
-          layout: false
-        }
-        format.json { render json: @source_file.to_jq_upload, status: :created }
+                 content_type: "text/html",
+                 layout: false
+        end
+        format.json { render json: @source_file.to_jq_upload, status: 201 }
       else
         format.html { render "new" }
-        format.json { render json: @source_file.errors, status: :unprocessable_entity }
+        format.json { render json: @source_file.errors, status: 422 }
       end
     end
   end
@@ -52,7 +52,7 @@ def destroy
   # for /admin/action_page/new
   # GET /admin/source_files/generate_key
   def generate_key
-    uid = SecureRandom.uuid.gsub(/-/, "")
+    uid = SecureRandom.uuid.delete("-")
 
     render json: {
       key: "uploads/#{uid}/#{params[:filename]}",
diff --git a/app/controllers/admin/topic_categories_controller.rb b/app/controllers/admin/topic_categories_controller.rb
index 7242e9818..111bd1d8c 100644
--- a/app/controllers/admin/topic_categories_controller.rb
+++ b/app/controllers/admin/topic_categories_controller.rb
@@ -14,18 +14,16 @@ def create
   end
 
   def destroy
-    begin
-      TopicCategory.destroy(params[:id])
-      render json: { id: params[:id] }
-    rescue => e
-      render text: e.message, status: 500
-    end
+    TopicCategory.destroy(params[:id])
+    render json: { id: params[:id] }
+  rescue StandardError => e
+    render body: e.message, status: 500
   end
 
   def update
     topic_category = TopicCategory.find(params[:id])
 
-    if topic_category.update_attributes(topic_category_params)
+    if topic_category.update(topic_category_params)
       render json: topic_category
     else
       render json: topic_category.errors, status: 500
diff --git a/app/controllers/admin/topic_sets_controller.rb b/app/controllers/admin/topic_sets_controller.rb
index 6ca7cb6db..7dab61a0b 100644
--- a/app/controllers/admin/topic_sets_controller.rb
+++ b/app/controllers/admin/topic_sets_controller.rb
@@ -1,16 +1,14 @@
 class Admin::TopicSetsController < Admin::ApplicationController
   def index
-    topic_sets = TopicSet.all.order(:tier)
+    topic_sets = TopicSet.order(:tier)
     render json: topic_sets
   end
 
   def destroy
-    begin
-      TopicSet.destroy(params[:id])
-      render json: { id: params[:id] }
-    rescue => e
-      render text: e.message, status: 500
-    end
+    TopicSet.destroy(params[:id])
+    render json: { id: params[:id] }
+  rescue StandardError => e
+    render body: e.message, status: 500
   end
 
   def create
@@ -28,7 +26,7 @@ def create
   def update
     topic_set = TopicSet.find(params[:id])
 
-    if topic_set.update_attributes(topic_set_params)
+    if topic_set.update(topic_set_params)
       render json: topic_set
     else
       render json: topic_set.errors, status: 500
diff --git a/app/controllers/admin/topics_controller.rb b/app/controllers/admin/topics_controller.rb
index a635cbb3f..ba41bb634 100644
--- a/app/controllers/admin/topics_controller.rb
+++ b/app/controllers/admin/topics_controller.rb
@@ -2,12 +2,10 @@ class Admin::TopicsController < Admin::ApplicationController
   layout "admin"
 
   def destroy
-    begin
-      Topic.destroy(params[:id])
-      render json: { id: params[:id] }
-    rescue => e
-      render text: e.message, status: 500
-    end
+    Topic.destroy(params[:id])
+    render json: { id: params[:id] }
+  rescue StandardError => e
+    render body: e.message, status: 500
   end
 
   def create
diff --git a/app/controllers/admin/users_controller.rb b/app/controllers/admin/users_controller.rb
index eb37ff0bb..38453b79f 100644
--- a/app/controllers/admin/users_controller.rb
+++ b/app/controllers/admin/users_controller.rb
@@ -6,7 +6,7 @@ def index
 
   def update
     user = User.find(params[:id])
-    if user.update_attributes(user_params)
+    if user.update(user_params)
       flash[:notice] = "#{user.email} was updated"
     else
       flash[:error] = "Could not update #{user.email}"
diff --git a/app/controllers/ahoy_controller.rb b/app/controllers/ahoy_controller.rb
index 83a56264c..8a6d70b83 100644
--- a/app/controllers/ahoy_controller.rb
+++ b/app/controllers/ahoy_controller.rb
@@ -1,15 +1,14 @@
 class AhoyController < ApplicationController
   before_action :set_ahoy_cookies
   before_action :track_ahoy_visit
-  before_action :set_ahoy_request_store
 
   def visit
     action_type = params.require(:action_type)
     action_page_id = params.require(:action_page_id)
 
     ahoy.track "View",
-      { type: "action", actionType: action_type, actionPageId: action_page_id },
-      action_page_id: action_page_id
+               { type: "action", actionType: action_type, actionPageId: action_page_id },
+               action_page_id: action_page_id
 
     send_data image_asset, content_type: "image/gif"
   end
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 0c4c4f5c2..71ebe9d3d 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -11,23 +11,17 @@ class ApplicationController < ActionController::Base
   before_action :set_locale
   before_action :user_conditional_logic
 
-  skip_before_action :set_ahoy_cookies
   skip_before_action :track_ahoy_visit
-  skip_before_action :set_ahoy_request_store
 
   def user_conditional_logic
-    if user_signed_in?
-      lock_users_with_expired_passwords! unless user_is_being_told_to_reset_pass_or_is_resetting_pass?
-    end
+    lock_users_with_expired_passwords! if user_signed_in? && !user_is_being_told_to_reset_pass_or_is_resetting_pass?
   end
 
   # This method seems to check if the request is coming from a domain listed in
   # `cors_allowed_domains` in application.yml, and if it is, the response gets
   # a header allowing the requesting domain to use this app's CRUD
   def cors
-    if Actioncenter::Application.config.cors_allowed_domains.include? request.env["HTTP_ORIGIN"] or Actioncenter::Application.config.cors_allowed_domains.include? "*"
-      response.headers["Access-Control-Allow-Origin"] = request.env["HTTP_ORIGIN"]
-    end
+    response.headers["Access-Control-Allow-Origin"] = request.env["HTTP_ORIGIN"] if Actioncenter::Application.config.cors_allowed_domains.include?(request.env["HTTP_ORIGIN"]) || Actioncenter::Application.config.cors_allowed_domains.include?("*")
   end
 
   def self.manifest(value = nil)
@@ -60,7 +54,7 @@ def user_is_being_told_to_reset_pass_or_is_resetting_pass?
 
   def configure_permitted_parameters
     devise_parameter_sanitizer.permit(:sign_up,
-                                      keys: [:record_activity, :subscribe])
+                                      keys: %i[record_activity subscribe])
   end
 
   def set_locale
diff --git a/app/controllers/concerns/action_page_display.rb b/app/controllers/concerns/action_page_display.rb
index f31507472..ca926275d 100644
--- a/app/controllers/concerns/action_page_display.rb
+++ b/app/controllers/concerns/action_page_display.rb
@@ -11,22 +11,25 @@ def set_action_display_variables
     @congress_message_campaign = @actionPage.congress_message_campaign
 
     # Shows a mailing list if no tools enabled
-    @no_tools = [:tweet, :petition, :call, :email, :congress_message].none? do |tool|
+    @no_tools = %i[tweet petition call email congress_message].none? do |tool|
       @actionPage.send "enable_#{tool}".to_sym
     end
 
     set_signatures
 
-    if @actionPage.petition and @actionPage.petition.enable_affiliations
-      @top_institutions = @actionPage.institutions.top(300, first: @institution.try(:id))
+    if @actionPage.petition&.enable_affiliations
+      @top_institutions = [
+        @institution,
+        TopInstitutionsQuery.run(action_page: @actionPage,
+                                 limit: 300,
+                                 exclude: [@institution])
+      ].flatten
       @institutions = @actionPage.institutions.order(:name)
       @institution_category = @institutions.first.category
     end
 
     @topic_category = nil
-    if @email_campaign and !@email_campaign.topic_category.nil?
-      @topic_category = @email_campaign.topic_category.as_2d_array
-    end
+    @topic_category = @email_campaign.topic_category.as_2d_array if @email_campaign && !@email_campaign.topic_category.nil?
 
     # Initialize a temporary signature object for form auto-population
     current_zipcode = params[:zipcode] || current_user.try(:zipcode)
@@ -53,18 +56,17 @@ def set_signatures
         @institution_signature_count = @signatures.pretty_count
       elsif @petition.enable_affiliations
         @signatures = @petition.signatures
-            .includes(affiliations: [:institution, :affiliation_type])
+                               .includes(affiliations: %i[institution affiliation_type])
       else
         @signatures = @petition.signatures
       end
 
       @signatures = @signatures
-                     .paginate(page: params[:page], per_page: 9)
-                     .order(created_at: :desc)
+                    .paginate(page: params[:page], per_page: 9)
+                    .order(created_at: :desc)
 
       @signature_count = @petition.signatures.pretty_count
       @require_location = !@petition.enable_affiliations
     end
   end
-
 end
diff --git a/app/controllers/concerns/date_range.rb b/app/controllers/concerns/date_range.rb
index ccefc3f4f..eae82f3f3 100644
--- a/app/controllers/concerns/date_range.rb
+++ b/app/controllers/concerns/date_range.rb
@@ -7,10 +7,9 @@ def set_dates
 
   def process_dates(date_range_text: nil, date_text: nil, **_)
     return parse_date_range(date_range_text) if date_range_text.present?
-    return [1.month.ago, Time.zone.now] unless date_text.present?
-    if date_text == "Action lifetime" && @actionPage.present?
-      return [@actionPage.created_at, Time.zone.now]
-    end
+    return [1.month.ago, Time.zone.now] if date_text.blank?
+    return [@actionPage.created_at, Time.zone.now] if date_text == "Action lifetime" && @actionPage.present?
+
     [parse_time_ago(date_text), Time.zone.now]
   end
 
@@ -21,12 +20,14 @@ def parse_date_range(date_range_string)
   # Convert Last X (days|weeks|months) to a time
   def parse_time_ago(string)
     _, count, unit = string.split(" ")
-    return Time.zone.now - 1.month unless %w(days weeks months years).include? unit
+    return Time.zone.now - 1.month unless %w[days weeks months years].include? unit
+
     Time.zone.now - count.to_i.send(unit)
   end
 
   def date_range_string
     return "" unless @start_date && @end_date
+
     format = "%Y-%m-%d"
     "#{@start_date.strftime(format)} - #{@end_date.strftime(format)}"
   end
diff --git a/app/controllers/concerns/logged_invisible_captcha.rb b/app/controllers/concerns/logged_invisible_captcha.rb
index 13885594d..a2b48f633 100644
--- a/app/controllers/concerns/logged_invisible_captcha.rb
+++ b/app/controllers/concerns/logged_invisible_captcha.rb
@@ -3,12 +3,12 @@ module LoggedInvisibleCaptcha
 
   def on_spam(options = {})
     log_failure
-    super options
+    super(options)
   end
 
   def on_timestamp_spam(options = {})
     log_failure
-    super options
+    super(options)
   end
 
   def log_failure
diff --git a/app/controllers/concerns/tooling.rb b/app/controllers/concerns/tooling.rb
index e7b0cbef3..3a4605e16 100644
--- a/app/controllers/concerns/tooling.rb
+++ b/app/controllers/concerns/tooling.rb
@@ -5,17 +5,14 @@ module Tooling
 
   def create_partner_subscription
     return unless @action_page
+
     @action_page.partners.each do |partner|
-      if params["#{partner.code}_subscribe"] == "1"
-        Subscription.create(partner_signup_params.merge(partner: partner))
-      end
+      Subscription.create(partner_signup_params.merge(partner: partner)) if params["#{partner.code}_subscribe"] == "1"
     end
   end
 
   def deliver_thanks_message
     @email ||= current_user.try(:email) || params[:email] || params.dig(:subscription, :email)
-    if @email.present?
-      UserMailer.thanks_message(@email, @action_page, user: @user, name: @name).deliver_now
-    end
+    UserMailer.thanks_message(@email, @action_page, user: @user, name: @name).deliver_now if @email.present?
   end
 end
diff --git a/app/controllers/congress_messages_controller.rb b/app/controllers/congress_messages_controller.rb
index 0bc6ab8aa..6b8976753 100644
--- a/app/controllers/congress_messages_controller.rb
+++ b/app/controllers/congress_messages_controller.rb
@@ -22,7 +22,7 @@ def new
     end
     forms, @links = CongressForms::Form.find(bioguide_ids)
     @defunct_members, @members = @members.partition do |m|
-      @links.keys.include? m.bioguide_id
+      @links.key?(m.bioguide_id)
     end
     @message = CongressMessage.new_from_lookup(location, @campaign, forms)
     render partial: "form"
@@ -37,16 +37,16 @@ def create
                    else
                      params[:forms][:bioguide_ids]
                    end
-    @message.forms, _ = CongressForms::Form.find(bioguide_ids)
+    @message.forms, = CongressForms::Form.find(bioguide_ids)
 
-    if EmailValidator.valid?(user_params[:email]) && @message.background_submit(params[:test])
+    if EmailValidator.valid?(user_params[:email]) && @message.background_submit(test: params[:test])
       @name = user_params[:first_name] # for deliver_thanks_message
       @email = user_params[:email] # for deliver_thanks_message
       track_action unless params[:test]
       deliver_thanks_message unless subscribe_user
       render partial: "tools/share"
     else
-      render plain: I18n.t(:invalid_submission, scope: :congress_forms), status: :bad_request
+      render plain: I18n.t(:invalid_submission, scope: :congress_forms), status: 400
     end
   end
 
@@ -84,35 +84,33 @@ def partner_signup_params
   end
 
   def update_user
-    if params[:update_user_data] == "yes"
-      current_user.update(user_params.except(:email))
-    end
+    current_user.update(user_params.except(:email)) if params[:update_user_data] == "yes"
   end
 
   def subscribe_user
     create_partner_subscription
 
     if params[:subscribe] == "1"
-      source = "action center congress message :: " + @action_page.title
+      source = "action center congress message :: #{@action_page.title}"
       user = User.find_or_initialize_by(email: user_params[:email])
       user.attributes = user_params
-      user.subscribe!(opt_in = false, source = source)["requires_confirmation"]
+      user.subscribe!(opt_in: false, source: source)["requires_confirmation"]
     end
   end
 
   def track_action
     customized_message = params[:message] != @campaign.message
     ahoy.track "Action",
-      { type: "action", actionType: "congress_message", actionPageId: params[:action_id],
-        customizedMessage: customized_message },
-      action_page: @action_page
+               { type: "action", actionType: "congress_message", actionPageId: params[:action_id],
+                 customizedMessage: customized_message },
+               action_page: @action_page
   end
 
   def address_not_found
-    render plain: I18n.t(:address_lookup_failed, scope: :congress_forms), status: :bad_request
+    render plain: I18n.t(:address_lookup_failed, scope: :congress_forms), status: 400
   end
 
   def congress_forms_request_failed
-    render plain: I18n.t(:request_failed, scope: :congress_forms), status: :internal_server_error
+    render plain: I18n.t(:request_failed, scope: :congress_forms), status: 500
   end
 end
diff --git a/app/controllers/partners_controller.rb b/app/controllers/partners_controller.rb
index 515f87f8b..ccb77b04d 100644
--- a/app/controllers/partners_controller.rb
+++ b/app/controllers/partners_controller.rb
@@ -6,9 +6,9 @@ class PartnersController < ApplicationController
   # GET /partners/1
   # GET /partners/1.json
   def show
-    @subscriptions = @partner.subscriptions.
-      paginate(page: params[:page], per_page: 10).
-      order("id desc")
+    @subscriptions = @partner.subscriptions
+                             .paginate(page: params[:page], per_page: 10)
+                             .order("id desc")
   end
 
   def csv
@@ -24,24 +24,22 @@ def update
         format.json { head :no_content }
       else
         format.html { render "edit" }
-        format.json { render json: @partner.errors, status: :unprocessable_entity }
+        format.json { render json: @partner.errors, status: 422 }
       end
     end
   end
 
   def add_user
-    user = User.find_by_email(params[:email])
+    user = User.find_by(email: params[:email])
     if user.nil?
       flash[:notice] = "Couldn't find a user by email #{params[:email]}"
+    elsif user.partner == @partner
+      flash[:notice] = "That user is already linked to #{@partner.name}"
+    elsif user.partner.nil?
+      user.partner = @partner
+      user.save
     else
-      if user.partner.nil?
-        user.partner = @partner
-        user.save
-      elsif user.partner == @partner
-        flash[:notice] = "That user is already linked to #{@partner.name}"
-      else
-        flash[:notice] = "That user is linked to another partner: #{user.partner.name}"
-      end
+      flash[:notice] = "That user is linked to another partner: #{user.partner.name}"
     end
     redirect_to @partner
   end
@@ -66,9 +64,7 @@ def set_partner
 
   def authenticate
     authenticate_user!
-    unless current_user.admin?
-      raise ActiveRecord::RecordNotFound if current_user.partner != @partner
-    end
+    raise ActiveRecord::RecordNotFound if !current_user.admin? && (current_user.partner != @partner)
   end
 
   # Never trust parameters from the scary internet, only allow the white list through.
diff --git a/app/controllers/registrations_controller.rb b/app/controllers/registrations_controller.rb
index 1254ffa85..1ea3f7de9 100644
--- a/app/controllers/registrations_controller.rb
+++ b/app/controllers/registrations_controller.rb
@@ -21,16 +21,14 @@ def update
   private
 
   def handle_nonunique_email
-    resource.errors.delete(:email)
+    resource.errors.delete(:email) unless resource.errors[:email].size > 1
 
     if resource.errors.empty?
-      existing = User.find_by_email(resource.email)
+      existing = User.find_by(email: resource.email)
       existing.send_email_taken_notice
 
       # Allow unconfirmed users to set a new password by re-registering.
-      if !existing.confirmed?
-        existing.update_attributes(sign_up_params)
-      end
+      existing.update(sign_up_params) unless existing.confirmed?
 
       if resource.persisted?
         resource.update_attribute(:unconfirmed_email, account_update_params[:email])
diff --git a/app/controllers/robots_controller.rb b/app/controllers/robots_controller.rb
index be90d584c..208100dda 100644
--- a/app/controllers/robots_controller.rb
+++ b/app/controllers/robots_controller.rb
@@ -1,9 +1,9 @@
 class RobotsController < ApplicationController
   def show
-    if Rails.env.development? or Rails.application.secrets.enable_basic_auth == "true"
-      render text: "User-agent: *\nDisallow: /"
+    if Rails.env.development? || (Rails.application.secrets.enable_basic_auth == "true")
+      render body: "User-agent: *\nDisallow: /"
     else
-      render text: ""
+      render body: ""
     end
   end
 
@@ -11,9 +11,9 @@ def show
   # for load balancing/ database connection detecting
   def heartbeat
     if User.count >= 0
-      render text: "Application Heart Beating OK"
+      render body: "Application Heart Beating OK"
     else
-      render text: "There's something odd about the database, probably disconnected...", status: 500
+      render body: "There's something odd about the database, probably disconnected...", status: 500
     end
   end
 end
diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb
index c86631eb7..e2f0fc452 100644
--- a/app/controllers/sessions_controller.rb
+++ b/app/controllers/sessions_controller.rb
@@ -3,7 +3,7 @@ class SessionsController < Devise::SessionsController
   before_action :unset_logged_in, only: :destroy
 
   def set_logged_in
-    if (user_signed_in?)
+    if user_signed_in?
       # Sets a "permanent" cookie (which expires in 20 years from now).
       # This is exclusively used to never cache content for logged in users
       cookies.permanent[:logged_in] = "I <3 EFF"
diff --git a/app/controllers/smarty_streets_controller.rb b/app/controllers/smarty_streets_controller.rb
index 3377aed18..6645415db 100644
--- a/app/controllers/smarty_streets_controller.rb
+++ b/app/controllers/smarty_streets_controller.rb
@@ -9,10 +9,13 @@ def street_address
     render json: get_data_on_address_zip(params), status: 200
   end
 
-  # This endpoint appears unused
-  def suggest
-    render json: get_suggestions_for_address(params), status: 200
-  end
+  # This endpoint appears unused (TheNotary 1/16)
+  # Lets remove it and see if anything breaks! (jparr 4/23)
+  # todo: remove if not used
+
+  # def suggest
+  #   render json: get_suggestions_for_address(params), status: 200
+  # end
 
   private
 
@@ -38,10 +41,8 @@ def authorize_query(params)
   end
 
   def proxy_request(url)
-    begin
-      return RestClient.get url, accept: :json, 'X-Include-Invalid': "true"
-    rescue => e
-      logger.error e
-    end
+    RestClient.get url, accept: :json, 'X-Include-Invalid': "true"
+  rescue StandardError => e
+    logger.error e
   end
 end
diff --git a/app/controllers/sns_controller.rb b/app/controllers/sns_controller.rb
index 00eb8ffb5..191704e3c 100644
--- a/app/controllers/sns_controller.rb
+++ b/app/controllers/sns_controller.rb
@@ -40,7 +40,7 @@ def set_context
 
   def set_message
     body = JSON.parse(request.body.read)
-    return JSON.parse(body["Message"])
+    JSON.parse(body["Message"])
   end
 
   def log_request
diff --git a/app/controllers/subscriptions_controller.rb b/app/controllers/subscriptions_controller.rb
index 95dcbe585..7554a5200 100644
--- a/app/controllers/subscriptions_controller.rb
+++ b/app/controllers/subscriptions_controller.rb
@@ -9,14 +9,14 @@ class SubscriptionsController < ApplicationController
 
   def create
     email = params[:subscription][:email]
-    if !EmailValidator.valid?(email)
+    unless EmailValidator.valid?(email)
       render json: { message: "Bad news, something went wrong with your email address. Please check it for typos and try again." }, status: 400
       return
     end
 
     update_user_data(email: email)
     params[:subscription][:opt_in] = params[:subscription][:opt_in] || false
-    subscription = CiviCRM::subscribe params[:subscription]
+    subscription = Civicrm.subscribe params[:subscription]
     if subscription["error"]
       render json: { message: subscription["error_message"] }, status: 500
     else
@@ -27,7 +27,7 @@ def create
   def edit
     civicrm_url = current_user.manage_subscription_url!
     if civicrm_url
-      redirect_to civicrm_url
+      redirect_to civicrm_url, allow_other_host: true
     else
       flash.now[:error] = I18n.t "subscriptions.edit_error"
       redirect_to "/account"
diff --git a/app/controllers/tools_controller.rb b/app/controllers/tools_controller.rb
index d5fe9158d..eec3eca24 100644
--- a/app/controllers/tools_controller.rb
+++ b/app/controllers/tools_controller.rb
@@ -10,10 +10,10 @@ class ToolsController < ApplicationController
 
   # Put an invisible captcha on forms are easy to submit programmatically and
   # create email subscriptions.
-  invisible_captcha only: [:email, :petition]
-  before_action :create_newsletter_subscription, only: [:email, :call]
-  before_action :create_partner_subscription, only: [:email, :call, :petition, :message_congress]
-  after_action :deliver_thanks_message, only: [:email, :call, :petition, :message_congress]
+  invisible_captcha only: %i[email petition]
+  before_action :create_newsletter_subscription, only: %i[email call]
+  before_action :create_partner_subscription, only: %i[email call petition message_congress]
+  after_action :deliver_thanks_message, only: %i[email call petition message_congress]
   skip_after_action :deliver_thanks_message, if: :signature_has_errors
 
   # See https://github.com/EFForg/action-center-platform/wiki/Deployment-Notes#csrf-protection
@@ -22,14 +22,12 @@ class ToolsController < ApplicationController
 
   def call
     ahoy.track "Action",
-      { type: "action", actionType: "call", actionPageId: params[:action_id] },
-      action_page: @action_page
+               { type: "action", actionType: "call", actionPageId: params[:action_id] },
+               action_page: @action_page
 
     @name = current_user.try :name
 
-    if params[:update_user_data] == "yes"
-      update_user_data(call_params)
-    end
+    update_user_data(call_params) if params[:update_user_data] == "yes"
 
     CallTool.campaign_call(params[:call_campaign_id],
                            phone: params[:phone],
@@ -56,12 +54,11 @@ def petition
     @action_page = Petition.find(params[:signature][:petition_id]).action_page
     @signature = Signature.new(signature_params.merge(user_id: @user.id))
 
-    if @signature.zipcode.present? && @signature.country_code.blank?
-      @signature.country_code = "US"
-    end
+    @signature.country_code = "US" if @signature.zipcode.present? && @signature.country_code.blank?
 
     if @signature.country_code == "US" && !Rails.application.secrets.smarty_streets_id.nil?
-      if city_state = SmartyStreets.get_city_state(@signature.zipcode)
+      city_state = SmartyStreets.get_city_state(@signature.zipcode)
+      if city_state
         @signature.city = city_state["city"]
         @signature.state = city_state["state"]
       end
@@ -76,28 +73,24 @@ def petition
           :zipcode, :country_code, :phone
         )
 
-        @source = "action center petition :: " + @action_page.title
-        @user.subscribe!(opt_in = true, source = @source)
+        @source = "action center petition :: #{@action_page.title}"
+        @user.subscribe!(opt_in: true, source: @source)
       end
 
-      if params[:update_user_data]
-        update_user_data(signature_params)
-      end
+      update_user_data(signature_params) if params[:update_user_data]
 
       ahoy.track "Action",
-        { type: "action", actionType: "signature", actionPageId: @action_page.id },
-        action_page: @action_page
+                 { type: "action", actionType: "signature", actionPageId: @action_page.id },
+                 action_page: @action_page
 
       respond_to do |format|
         format.json { render json: { success: true }, status: 200 }
         format.html do
-          begin
-            url = URI.parse(request.referrer)
-            url.query = [url.query.presence, "thankyou=1"].join("&")
-            redirect_to url.to_s
-          rescue
-            redirect_to welcome_index_path
-          end
+          url = URI.parse(request.referrer)
+          url.query = [url.query.presence, "thankyou=1"].join("&")
+          redirect_to url.to_s
+        rescue StandardError
+          redirect_to welcome_index_path
         end
       end
     else
@@ -107,23 +100,49 @@ def petition
 
   def tweet
     ahoy.track "Action",
-      { type: "action", actionType: "tweet", actionPageId: params[:action_id] },
-      action_page: @action_page
+               { type: "action", actionType: "tweet", actionPageId: params[:action_id] },
+               action_page: @action_page
     render json: { success: true }, status: 200
   end
 
   def email
-    unless (@user and @user.events.emails.find_by_action_page_id(params[:action_id])) or params[:dnt] == "true"
+    unless @user&.taken_action?(@action_page) || params[:dnt] == "true"
       ahoy.track "Action",
-        { type: "action", actionType: "email", actionPageId: params[:action_id] },
-        action_page: @action_page
+                 { type: "action", actionType: "email", actionPageId: params[:action_id] },
+                 action_page: @action_page
     end
 
     if params[:service] == "copy"
       @actionPage = @action_page
       render "email_target"
+    elsif params[:state_rep_email]
+      redirect_to @action_page.email_campaign.service_uri(params[:service], { email: params[:state_rep_email] }), allow_other_host: true
     else
-      redirect_to @action_page.email_campaign.service_uri(params[:service])
+      redirect_to @action_page.email_campaign.service_uri(params[:service]), allow_other_host: true
+    end
+  end
+
+  # GET /tools/state_reps
+  #
+  # This endpoint is hit by the js for state legislator lookup-by-address actions.
+  # It renders json containing html markup for presentation on the view
+  def state_reps
+    @email_campaign = EmailCampaign.find(params[:email_campaign_id])
+    @actionPage = @email_campaign.action_page
+    # TODO: strong params this
+    address = "#{params[:street_address]} #{params[:zipcode]}"
+    civic_api_response = CivicApi.state_rep_search(address, @email_campaign.leg_level)
+    @state_reps = JSON.parse(civic_api_response.body)["officials"]
+    state_rep_emails = []
+    @state_reps.each do |sr|
+      state_rep_emails << sr["emails"] unless sr["emails"].nil?
+    end
+    # single-rep lookup only
+    @state_rep_email = state_rep_emails.flatten.first
+    if @state_reps.present?
+      render json: { content: render_to_string(partial: "action_page/state_reps") }, status: 200
+    else
+      render json: { error: "No representatives found" }, status: 200
     end
   end
 
@@ -162,7 +181,7 @@ def set_user
   end
 
   def set_action_page
-    @action_page ||= ActionPage.find_by_id(params[:action_id])
+    @action_page ||= ActionPage.find_by(id: params[:action_id])
   end
 
   def create_newsletter_subscription
@@ -170,7 +189,7 @@ def create_newsletter_subscription
       source = "action center #{@action_page.class.name.downcase} :: " + @action_page.title
       params[:subscription][:opt_in] = true
       params[:subscription][:source] = source
-      CiviCRM::subscribe params[:subscription]
+      Civicrm.subscribe params[:subscription]
     end
   end
 
@@ -179,9 +198,9 @@ def signature_has_errors
   end
 
   def partner_signup_params
-    attributes = %i(first_name last_name email)
+    attributes = %i[first_name last_name email]
     # Partner signup params might come through the main form or a nested subscription form.
-    %i(signature subscription).each do |model|
+    %i[signature subscription].each do |model|
       return params.require(model).permit(*attributes) if params[model].present?
     end
     params.permit(*attributes)
@@ -191,8 +210,8 @@ def signature_params
     params.require(:signature).permit(
       :first_name, :last_name, :email, :petition_id, :user_id,
       :street_address, :city, :state, :country_code, :zipcode, :anonymous,
-      affiliations_attributes: [
-        :id, :institution_id, :affiliation_type_id
+      affiliations_attributes: %i[
+        id institution_id affiliation_type_id
       ]
     )
   end
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 38f7c87f2..99a9bd6a7 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -7,11 +7,11 @@ def show
   end
 
   def update
-    if current_user.update_attributes(user_params)
-      flash[:notice] = "You updated your account successfully."
-    else
-      flash[:notice] = "Could not update your account."
-    end
+    flash[:notice] = if current_user.update(user_params)
+                       "You updated your account successfully."
+                     else
+                       "Could not update your account."
+                     end
 
     if request.xhr?
       render json: {}, status: 200
diff --git a/app/controllers/welcome_controller.rb b/app/controllers/welcome_controller.rb
index 8e018e532..269572d32 100644
--- a/app/controllers/welcome_controller.rb
+++ b/app/controllers/welcome_controller.rb
@@ -1,10 +1,10 @@
 class WelcomeController < ApplicationController
   manifest :welcome
   def index
-    @actionPages = FeaturedActionPage.includes(:action_page).
-                                      order("weight desc").
-                                      map(&:action_page).
-                                      compact
+    @actionPages = FeaturedActionPage.includes(:action_page)
+                                     .order("weight desc")
+                                     .map(&:action_page)
+                                     .compact
     @featuredActionPage = @actionPages.pop
     @actionPages = @actionPages.reverse
   end
diff --git a/app/helpers/action_page_helper.rb b/app/helpers/action_page_helper.rb
index 1e78245f3..2f322a71d 100644
--- a/app/helpers/action_page_helper.rb
+++ b/app/helpers/action_page_helper.rb
@@ -4,9 +4,7 @@ def twitter_share_url(action_page)
       action_page.share_message, action_page_url(action_page)
     ].map(&:presence).compact.join(" ")
 
-    suffix = if Rails.application.config.twitter_handle
-               " via @#{Rails.application.config.twitter_handle}"
-             end
+    suffix = (" via @#{Rails.application.config.twitter_handle}" if Rails.application.config.twitter_handle)
     message += suffix if action_page.share_message.to_s.length + suffix.length <= 117
 
     related = Rails.application.config.twitter_related.to_a.join(",")
@@ -14,7 +12,6 @@ def twitter_share_url(action_page)
     "https://twitter.com/intent/tweet?text=#{u message}&related=#{related}"
   end
 
-
   def tweet_url(target, message)
     message = [target, message].compact.join(" ")
     related = Rails.application.config.twitter_related.to_a.join(",")
@@ -22,10 +19,8 @@ def tweet_url(target, message)
   end
 
   def facebook_share_url(action_page)
-    "https://www.facebook.com/sharer/sharer.php?" + {
-      u: action_page_url(action_page),
-      display: "popup"
-    }.to_param
+    fb_params = { u: action_page_url(action_page), display: "popup" }.to_param
+    "https://www.facebook.com/sharer/sharer.php?#{fb_params}"
   end
 
   def email_friends_url(action_page)
@@ -70,16 +65,17 @@ def parse_email_text(options = {})
     title = @actionPage.title
     name = html_escape(options[:name])
 
-    email_text.
-      gsub(/\$TITLE/, title).
-      gsub(/\$URL/, url).
-      gsub(/\$NAME/, name)
+    email_text
+      .gsub("$TITLE", title)
+      .gsub("$URL", url)
+      .gsub("$NAME", name)
   end
 
   def visible_partners
     mailings_enabled = @actionPage.partners.includes(:partnerships)
                                   .where(partnerships: { enable_mailings: true })
     return mailings_enabled if params[:partner].blank?
+
     mailings_enabled.where(code: params[:partner])
   end
 end
diff --git a/app/helpers/admin/action_pages_helper.rb b/app/helpers/admin/action_pages_helper.rb
index dfc8b35dc..d10cd02a5 100644
--- a/app/helpers/admin/action_pages_helper.rb
+++ b/app/helpers/admin/action_pages_helper.rb
@@ -1,47 +1,43 @@
-module Admin
-  module ActionPagesHelper
-    def call_campaign_options_for_select
-      if CallTool.enabled?
-        CallTool.campaigns.map do |campaign|
-          ["#{campaign['name']} (#{campaign['status']})", campaign["id"]]
-        end.sort_by(&:last).reverse
-      else
-        []
-      end
-    rescue SystemCallError, RestClient::Exception
+module Admin::ActionPagesHelper
+  def call_campaign_options_for_select
+    if CallTool.enabled?
+      CallTool.campaigns.map do |campaign|
+        ["#{campaign['name']} (#{campaign['status']})", campaign["id"]]
+      end.sort_by(&:last).reverse
+    else
       []
     end
+  rescue SystemCallError, RestClient::Exception
+    []
+  end
 
-    def congress_member_options_for_select(campaign)
-      selected = (campaign.target_bioguide_ids || "").split(/\s*,\s*/)
+  def congress_member_options_for_select(campaign)
+    selected = (campaign.target_bioguide_ids || "").split(/\s*,\s*/)
 
-      state_names = Places.us_state_codes.invert
+    state_names = Places.us_state_codes.invert
 
-      congressional_bioguides = []
-      grouped_reps = CongressMember.all.group_by do |rep|
-        congressional_bioguides << rep.bioguide_id
-        state_names[rep.state]
-      end
+    congressional_bioguides = []
+    grouped_reps = CongressMember.all.group_by do |rep|
+      congressional_bioguides << rep.bioguide_id
+      state_names[rep.state]
+    end
 
-      grouped_reps.each do |state, state_reps|
-        grouped_reps[state] = state_reps.sort_by(&:last_name).map do |rep|
-          label = "#{rep.full_name} (#{rep.bioguide_id})"
-          [label, rep.bioguide_id]
-        end
+    grouped_reps.each do |state, state_reps|
+      grouped_reps[state] = state_reps.sort_by(&:last_name).map do |rep|
+        label = "#{rep.full_name} (#{rep.bioguide_id})"
+        [label, rep.bioguide_id]
       end
+    end
 
-      grouped_reps = grouped_reps.keys.sort.map { |k| [k, grouped_reps[k]] }
+    grouped_reps = grouped_reps.keys.sort.map { |k| [k, grouped_reps[k]] }
 
-      non_congressional_bioguides = []
-      CongressMessageCampaign.targets_bioguide_ids.pluck(:target_bioguide_ids).each do |targets|
-        non_congressional_bioguides.concat(targets.split(/\s*,\s*/) - congressional_bioguides)
-      end
+    non_congressional_bioguides = []
+    CongressMessageCampaign.targets_bioguide_ids.pluck(:target_bioguide_ids).each do |targets|
+      non_congressional_bioguides.concat(targets.split(/\s*,\s*/) - congressional_bioguides)
+    end
 
-      if non_congressional_bioguides.present?
-        grouped_reps.unshift(["Non-congressional", non_congressional_bioguides.sort])
-      end
+    grouped_reps.unshift(["Non-congressional", non_congressional_bioguides.sort]) if non_congressional_bioguides.present?
 
-      grouped_options_for_select(grouped_reps, selected)
-    end
+    grouped_options_for_select(grouped_reps, selected)
   end
 end
diff --git a/app/helpers/admin/topics_helper.rb b/app/helpers/admin/topics_helper.rb
index cb93a029c..9308f1c89 100644
--- a/app/helpers/admin/topics_helper.rb
+++ b/app/helpers/admin/topics_helper.rb
@@ -1,19 +1,17 @@
-module Admin
-  module TopicsHelper
-    def topic_category_props(topic_category)
-      topic_sets = topic_category.topic_sets.map do |topic_set|
-        {
-          id: topic_set.id,
-          tier: topic_set.tier,
-          topics: topic_set.topics.map { |topic| topic.attributes.slice("id", "name") }
-        }
-      end
-
+module Admin::TopicsHelper
+  def topic_category_props(topic_category)
+    topic_sets = topic_category.topic_sets.map do |topic_set|
       {
-        topicCategoryId: topic_category.id,
-        topicCategoryName: topic_category.name,
-        topicSets: topic_sets
+        id: topic_set.id,
+        tier: topic_set.tier,
+        topics: topic_set.topics.map { |topic| topic.attributes.slice("id", "name") }
       }
     end
+
+    {
+      topicCategoryId: topic_category.id,
+      topicCategoryName: topic_category.name,
+      topicSets: topic_sets
+    }
   end
 end
diff --git a/app/helpers/ahoy_helper.rb b/app/helpers/ahoy_helper.rb
index 2bc4f3676..b1ef23a17 100644
--- a/app/helpers/ahoy_helper.rb
+++ b/app/helpers/ahoy_helper.rb
@@ -1,8 +1,8 @@
 module AhoyHelper
   def ahoy_track_tag(action_type, action_page_id)
-    content_tag(:div, style: "height: 0; overflow: hidden") {
+    content_tag(:div, style: "height: 0; overflow: hidden") do
       params = { action_type: action_type, action_page_id: action_page_id, format: :gif }
       image_tag(ahoy_visit_url(params), style: "border: 0", alt: "")
-    }
+    end
   end
 end
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index 12ff78db6..ae639d71b 100644
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -1,15 +1,15 @@
 module ApplicationHelper
   def page_title
-    t("page_title", scope: [controller_path.gsub("/", "_"), action_name],
-      default: [@title, I18n.t("site_title")].compact.join(" | "))
+    t("page_title", scope: [controller_path.tr("/", "_"), action_name],
+                    default: [@title, I18n.t("site_title")].compact.join(" | "))
   end
 
   def escape_page_title
-    URI.escape(page_title , Regexp.new("[^#{URI::PATTERN::UNRESERVED}]"))
+    ERB::Util.url_encode page_title
   end
 
   def twitter_handle
-    "@" + Rails.application.config.twitter_handle.to_s
+    "@#{Rails.application.config.twitter_handle}"
   end
 
   def markdown(blogtext)
@@ -21,7 +21,7 @@ def markdown(blogtext)
   end
 
   def substitute_keywords(blogtext)
-    if @actionPage and @actionPage.description and @petition
+    if @actionPage&.description && @petition
       blogtext.gsub("$SIGNATURECOUNT", @petition.signatures.pretty_count)
     else
       blogtext
@@ -71,24 +71,26 @@ def update_user_data(params = {})
     if user_signed_in?
       p = params.clone
       p.delete(:email)
-      current_user.update_attributes p
+      current_user.update p
     end
   end
 
+  # REFACTOR_FLAG
+  # use ActiveStorage::Filename#sanitized after upgrading to 5.2
   def sanitize_filename(filename)
     # Split the name when finding a period which is preceded by some
     # character, and is followed by some character other than a period,
     # if there is no following period that is followed by something
     # other than a period (yeah, confusing, I know)
-    fn = filename.split /(?<=.)\.(?=[^.])(?!.*\.[^.])/m
+    fn = filename.split(/(?<=.)\.(?=[^.])(?!.*\.[^.])/m)
 
     # We now have one or two parts (depending on whether we could find
     # a suitable period). For each of these parts, replace any unwanted
     # sequence of characters with an underscore
-    fn.map! { |s| s.gsub /[^a-z0-9\-]+/i, "_" }
+    fn.map! { |s| s.gsub(/[^a-z0-9\-]+/i, "_") }
 
     # Finally, join the parts with a period and return the result
-    return fn.join "."
+    fn.join "."
   end
 
   def can?(ability)
@@ -110,18 +112,20 @@ def messages
 
   def percentage(x, y, precision: 0)
     return "-" unless y > 0
+
     number_to_percentage((x / y.to_f) * 100, precision: precision)
   end
 
   private
 
   def user_session_data_whitelist
-    [:email, :last_name, :first_name, :street_address, :city, :state, :zipcode,
-     :country_code, :phone]
+    %i[email last_name first_name street_address city state zipcode
+       country_code phone]
   end
 
   def current_user_data(field)
     return nil unless user_session_data_whitelist.include? field
+
     current_user.try(field)
   end
 end
diff --git a/app/helpers/congress_message_helper.rb b/app/helpers/congress_message_helper.rb
index 12659b644..7fb8e7497 100644
--- a/app/helpers/congress_message_helper.rb
+++ b/app/helpers/congress_message_helper.rb
@@ -1,8 +1,7 @@
 module CongressMessageHelper
   def congress_forms_prefills(campaign, field)
-    if field.value == "$TOPIC" && campaign.topic_category.present?
-      return campaign.topic_category.best_match(field.options_hash)
-    end
+    return campaign.topic_category.best_match(field.options_hash) if field.value == "$TOPIC" && campaign.topic_category.present?
+
     {
       "$NAME_FIRST" => current_first_name,
       "$NAME_LAST" => current_last_name,
@@ -10,16 +9,16 @@ def congress_forms_prefills(campaign, field)
       "$PHONE" => number_to_phone(current_user.try(:phone)),
       "$ADDRESS_STREET" => current_street_address,
       "$ADDRESS_CITY" => current_city,
-      "$SUBJECT" => campaign.subject,
+      "$SUBJECT" => campaign.subject
     }[field.value]
   end
 
   def congress_forms_field(field, campaign, message_attributes, bioguide_id = nil)
-    if bioguide_id
-      name = "member_attributes[#{bioguide_id}][#{field.value}]"
-    else
-      name = "common_attributes[#{field.value}]"
-    end
+    name = if bioguide_id
+             "member_attributes[#{bioguide_id}][#{field.value}]"
+           else
+             "common_attributes[#{field.value}]"
+           end
 
     # Try to guess the input based on saved info about the campaign + user.
     prefill = congress_forms_prefills(campaign, field)
@@ -30,11 +29,11 @@ def congress_forms_field(field, campaign, message_attributes, bioguide_id = nil)
     elsif field.value == "$PHONE"
       telephone_field_tag name, prefill, congress_forms_field_defaults(field)
         .merge({
-          class: "form-control bfh-phone",
-          "data-format": "ddd-ddd-dddd",
-          pattern: "^((5\\d[123467890])|(5[123467890]\\d)|([2346789]\\d\\d))-\\d\\d\\d-\\d\\d\\d\\d$",
-          title: "Must be a valid US phone number entered in 555-555-5555 format"
-        })
+                 class: "form-control bfh-phone",
+                 "data-format": "ddd-ddd-dddd",
+                 pattern: "^((5\\d[123467890])|(5[123467890]\\d)|([2346789]\\d\\d))-\\d\\d\\d-\\d\\d\\d\\d$",
+                 title: "Must be a valid US phone number entered in 555-555-5555 format"
+               })
     elsif field.value == "$EMAIL"
       email_field_tag name, prefill, congress_forms_field_defaults(field)
     elsif field.value.include?("ADDRESS") && !field.is_select?
@@ -44,7 +43,7 @@ def congress_forms_field(field, campaign, message_attributes, bioguide_id = nil)
       text_field_tag name, prefill, congress_forms_field_defaults(field, placeholder: address_label, "aria-label": address_label)
     elsif field.is_select?
       select_tag name, options_for_select(field.options_hash, prefill),
-        class: "form-control", "aria-label": field.label, include_blank: field.label, required: true
+                 class: "form-control", "aria-label": field.label, include_blank: field.label, required: true
     else
       text_field_tag name, prefill, congress_forms_field_defaults(field)
     end
diff --git a/app/helpers/devise_helper.rb b/app/helpers/devise_helper.rb
index ff4a7e3ce..c4bfed8b0 100644
--- a/app/helpers/devise_helper.rb
+++ b/app/helpers/devise_helper.rb
@@ -2,28 +2,22 @@ module DeviseHelper
   # Customized to add model error instead of flashing the error.
   def devise_error_messages!
     flash_alerts = []
-    error_key = "errors.messages.not_saved"
 
     flash_alerts.push("This account was locked due to too many failed login attempts.  Check your email for a link to unlock.") if locked_account?
 
-    if !flash.empty?
+    unless flash.empty?
       flash_alerts.push(flash[:error]) if flash[:error]
       flash_alerts.push(flash[:alert]) if flash[:alert]
       flash_alerts.push(flash[:notice]) if flash[:notice]
-      error_key = "devise.failure.invalid"
     end
 
     return "" if resource.errors.empty? && flash_alerts.empty?
+
     @hasErrorMessages = true
     errors = resource.errors.empty? ? flash_alerts : resource.errors.full_messages
 
     messages = errors.map { |msg| content_tag(:p, msg) }.join
-    sentence = I18n.t(error_key, count: errors.count,
-                                 resource: resource.class.model_name.human.downcase)
-
-    if !flash[:notice] | flash[:alert]
-      panel_title = "<div class='panel-heading'><h3 class='panel-title'>Error</h3></div>"
-    end
+    panel_title = "<div class='panel-heading'><h3 class='panel-title'>Error</h3></div>" if !flash[:notice] | flash[:alert]
 
     html = <<-HTML
     <div class="panel panel-default error_explanation">
@@ -42,7 +36,7 @@ def devise_error_messages?
   end
 
   def locked_account?
-    u = User.find_by_email(@user.email)
-    u && u.access_locked?
+    u = User.find_by(email: @user.email)
+    u&.access_locked?
   end
 end
diff --git a/app/helpers/email_campaign_helper.rb b/app/helpers/email_campaign_helper.rb
new file mode 100644
index 000000000..4f41b9d5c
--- /dev/null
+++ b/app/helpers/email_campaign_helper.rb
@@ -0,0 +1,14 @@
+module EmailCampaignHelper
+  def legislative_level_from_state_representative_info(legislator_info)
+    case legislator_info
+    when "legislatorLowerBody"
+      "state representative of the lower chamber"
+    when "legislatorUpperBody"
+      "state representative of the upper chamber"
+    when "headOfGovernment"
+      "Governor of the State"
+    else
+      "Invalid info"
+    end
+  end
+end
diff --git a/lib/action_cloner.rb b/app/lib/action_cloner.rb
similarity index 52%
rename from lib/action_cloner.rb
rename to app/lib/action_cloner.rb
index 45a63f02b..253d73fb4 100644
--- a/lib/action_cloner.rb
+++ b/app/lib/action_cloner.rb
@@ -7,13 +7,9 @@ def self.run(original)
     clone_tools(original, clone)
   end
 
-  private
-
   def self.clone_tools(original, clone)
-    %i(tweet email_campaign petition congress_message_campaign call_campaign).each do |tool_sym|
-      if original.send("#{tool_sym}_id").present?
-        clone.send("#{tool_sym}=", original.send(tool_sym).dup)
-      end
+    %i[tweet email_campaign petition congress_message_campaign call_campaign].each do |tool_sym|
+      clone.send("#{tool_sym}=", original.send(tool_sym).dup) if original.send("#{tool_sym}_id").present?
     end
     clone
   end
diff --git a/lib/call_tool.rb b/app/lib/call_tool.rb
similarity index 69%
rename from lib/call_tool.rb
rename to app/lib/call_tool.rb
index 9bb969e40..0714715ec 100644
--- a/lib/call_tool.rb
+++ b/app/lib/call_tool.rb
@@ -2,23 +2,19 @@
 
 module CallTool
   def self.campaign_call(campaign, phone:, location:, user_id:, action_id:, callback_url:)
-    unless [campaign, phone, location, action_id, callback_url].all?
-      raise ArgumentError.new("required argument is nil")
-    end
+    raise ArgumentError, "required argument is nil" unless [campaign, phone, location, action_id, callback_url].all?
 
     get "/call/create", {
       campaignId: campaign.to_param,
-      userPhone:  phone,
+      userPhone: phone,
       userCountry: "US",
       userLocation: location,
       callback_url: callback_url,
-
-      # TODO - Settle on the schema of the private meta data
       meta: {
-        user_id:     user_id,
-        action_id:   action_id,
+        user_id: user_id,
+        action_id: action_id,
         action_type: "call"
-      }.to_json,
+      }.to_json
     }
   end
 
@@ -32,7 +28,7 @@ def self.campaigns
 
     api_response = { "total_pages" => 1, "page" => 0 }
     until api_response["page"] >= api_response["total_pages"]
-      api_response = JSON.parse(get "/api/campaign", { api_key: api_key, page: api_response["page"] + 1 })
+      api_response = JSON.parse(get("/api/campaign", { api_key: api_key, page: api_response["page"] + 1 }))
 
       campaigns.concat(api_response["objects"].map { |campaign| campaign.slice("id", "name", "allow_call_in", "phone_numbers", "status") })
     end
@@ -44,19 +40,13 @@ def self.enabled?
     Rails.application.secrets.fetch_values(:call_tool_url, :call_tool_api_key).all?
   end
 
-  private
-
   def self.get(action, params = {})
     RestClient.get endpoint(action), params: params
   rescue RestClient::BadRequest => e
-    begin
-      error = JSON.parse(e.http_body)["error"]
-    rescue
-      raise
-    end
+    error = JSON.parse(e.http_body)["error"]
 
     # Don't raise for twilio error 13224: number invalid
-    unless error.match(/^13224:/)
+    unless error.match?(/^13224:/)
       if Rails.application.secrets.sentry_dsn.nil?
         raise error
       else
@@ -66,8 +56,8 @@ def self.get(action, params = {})
   end
 
   def self.endpoint(action)
-    base = Rails.application.config.call_tool_url.sub(/\/$/, "")
-    action = action.sub(/^\//, "")
+    base = Rails.application.config.call_tool_url.sub(%r{/$}, "")
+    action = action.sub(%r{^/}, "")
     "#{base}/#{action}"
   end
 
diff --git a/app/lib/civic_api.rb b/app/lib/civic_api.rb
new file mode 100644
index 000000000..3f28306de
--- /dev/null
+++ b/app/lib/civic_api.rb
@@ -0,0 +1,57 @@
+require "rest_client"
+
+# From Google, the API provider (September 2022):
+# Reference link: https://developers.google.com/civic-information/docs/data_guidelines?hl=en
+# "Developer’s using the API should make every effort to ensure all users are met with the same experience. We
+# do not allow holdbacks, A/B testing, or similar experiments."
+
+module CivicApi
+  VALID_ROLES = %w[legislatorLowerBody legislatorUpperBody headOfGovernment].freeze
+
+  def self.state_rep_search(address, roles)
+    raise ArgumentError, "required argument is nil" unless [address, roles].all?
+
+    raise ArgumentError, "Invalid role for Civic API #{roles}" unless VALID_ROLES.include?(roles)
+
+    # `includeOffices` param is needed in order to get officials list
+    # `administrativeArea1` param restricts the search to state-level legislators (and governors)
+    params = { address: address, includeOffices: true, levels: "administrativeArea1", roles: roles, key: civic_api_key }
+
+    get params
+  end
+
+  def self.all_state_reps_for_role(state, roles)
+    raise ArgumentError, "required argument is nil" unless [state, roles].all?
+
+    # need to append division information to API route
+    path_params = { ocdId: "ocd-division%2Fcountry%3Aus%2Fstate%3A#{state.downcase}" }
+    # `administrativeArea1` param restricts the search to state-level legislators (and governors)
+    query_params = { levels: "administrativeArea1", recursive: true, roles: roles, key: civic_api_key }
+
+    params = { path_params: path_params, query_params: query_params }
+
+    get params
+  end
+
+  def self.civic_api_key
+    Rails.application.secrets.google_civic_api_key
+  end
+
+  def self.endpoint
+    Rails.application.config.google_civic_api_url
+  end
+
+  def self.get(params = {})
+    if params[:path_params].nil?
+      url = endpoint
+    else
+      ocd_encpoint = endpoint.clone
+      url = ocd_encpoint.concat(params[:path_params][:ocdId])
+      params = params[:query_params]
+    end
+    RestClient.get url, params: params
+  rescue RestClient::BadRequest => e
+    error = JSON.parse(e.http_body)["error"]
+    raise error
+  end
+end
diff --git a/lib/civicrm.rb b/app/lib/civicrm.rb
similarity index 60%
rename from lib/civicrm.rb
rename to app/lib/civicrm.rb
index 7773669b7..2a8a081d3 100644
--- a/lib/civicrm.rb
+++ b/app/lib/civicrm.rb
@@ -1,5 +1,5 @@
 require "rest_client"
-module CiviCRM
+module Civicrm
   module UserMethods
     def contact_attributes
       attributes.symbolize_keys.slice(
@@ -8,34 +8,39 @@ def contact_attributes
       )
     end
 
-    def subscribe!(opt_in = false, source = "action center")
-      return nil if CiviCRM.skip_crm?
-      res = CiviCRM::subscribe contact_attributes.merge(opt_in: opt_in, source: source)
-      update_attributes(contact_id: res["contact_id"]) if (res && res["contact_id"])
+    def subscribe!(opt_in: false, source: "action center")
+      return nil if Civicrm.skip_crm?
+
+      res = Civicrm.subscribe contact_attributes.merge(opt_in: opt_in, source: source)
+      update(contact_id: res["contact_id"]) if res && res["contact_id"]
       res || {}
     end
 
     def contact_id!
-      return nil if CiviCRM.skip_crm?
-      res = CiviCRM::import_contact contact_attributes
-      update_attributes(contact_id: res["contact_id"]) if (res && res["contact_id"])
+      return nil if Civicrm.skip_crm?
+
+      res = Civicrm.import_contact contact_attributes
+      update(contact_id: res["contact_id"]) if res && res["contact_id"]
       contact_id
     end
 
     def add_civicrm_activity!(action_page_id)
-      return nil if CiviCRM.skip_crm?
-      if contact_id && action_page = ActionPage.find_by_id(action_page_id)
-        CiviCRM::add_activity(
-          contact_id: contact_id,
-          subject: "Took Action #{action_page.id}: #{action_page.title}"
-        )
-      end
+      return nil if Civicrm.skip_crm?
+
+      action_page = ActionPage.find_by(id: action_page_id)
+      return unless contact_id && action_page
+
+      Civicrm.add_activity(
+        contact_id: contact_id,
+        subject: "Took Action #{action_page.id}: #{action_page.title}"
+      )
     end
 
     def manage_subscription_url!
-      checksum = CiviCRM::get_checksum(contact_id)
+      checksum = Civicrm.get_checksum(contact_id)
       return nil unless checksum
-      "#{Rails.application.secrets.supporters['host']}/update-your-preferences?" + {
+
+      "#{Rails.application.secrets.supporters[:host]}/update-your-preferences?" + {
         cid1: contact_id,
         cs: checksum
       }.to_param
@@ -43,16 +48,18 @@ def manage_subscription_url!
   end
 
   def self.skip_crm?
-    Rails.application.secrets.supporters["api_key"].nil?
+    Rails.application.secrets.supporters[:api_key].nil?
   end
 
   def self.subscribe(params)
     return {} if skip_crm?
-    self.import_contact params.merge(subscribe: true)
+
+    import_contact params.merge(subscribe: true)
   end
 
   def self.import_contact(params)
     return {} if skip_crm?
+
     post base_params.merge(
       method: "import_contact",
       data: {
@@ -73,6 +80,7 @@ def self.import_contact(params)
 
   def self.add_activity(params)
     return nil if skip_crm?
+
     post base_params.merge(
       method: "add_activity",
       data: params.slice(:contact_id, :subject, :activity_type_id).to_json
@@ -80,21 +88,18 @@ def self.add_activity(params)
   end
 
   def self.supporters_api_url
-    "#{Rails.application.secrets.supporters['host']}/#{Rails.application.secrets.supporters['path']}"
+    "#{Rails.application.secrets.supporters[:host]}/#{Rails.application.secrets.supporters[:path]}"
   end
 
-  private
-
   def self.post(params)
-    begin
-      res = JSON.parse RestClient.post(supporters_api_url, params)
-      raise res["error_message"] if res["error"]
-      return res
-    rescue => e
-      Raven.capture_exception(e)
-      Rails.logger.error "#{ e } (#{ e.class })!"
-      return false
-    end
+    res = JSON.parse RestClient.post(supporters_api_url, params)
+    raise res["error_message"] if res["error"]
+
+    res
+  rescue StandardError => e
+    Raven.capture_exception(e)
+    Rails.logger.error "#{e} (#{e.class})!"
+    false
   end
 
   def self.send_email_template_data(params)
@@ -116,6 +121,7 @@ def self.find_contact_by_email_data(params)
 
   def self.get_checksum(contact_id)
     return nil if skip_crm?
+
     # Valid for 24 hours
     res = post base_params.merge(
       method: "generate_checksum",
@@ -125,6 +131,6 @@ def self.get_checksum(contact_id)
   end
 
   def self.base_params
-    { site_key: Rails.application.secrets.supporters["api_key"] }
+    { site_key: Rails.application.secrets.supporters[:api_key] }
   end
 end
diff --git a/lib/congress_forms.rb b/app/lib/congress_forms.rb
similarity index 78%
rename from lib/congress_forms.rb
rename to app/lib/congress_forms.rb
index a31c483cf..9a6b549cd 100644
--- a/lib/congress_forms.rb
+++ b/app/lib/congress_forms.rb
@@ -7,7 +7,8 @@ class Form
     def self.find(bioguide_ids)
       raw_data = CongressForms.post("/retrieve-form-elements/", { bio_ids: bioguide_ids })
       raise CongressForms::RequestFailed if raw_data.empty?
-      links, forms = raw_data.partition { |id, raw| raw["defunct"] }
+
+      links, forms = raw_data.partition { |_id, raw| raw["defunct"] }
       [
         forms.map { |id, raw| Form.new(id, raw["required_actions"]) },
         links.map { |id, raw| [id, raw["contact_url"]] }.to_h
@@ -21,7 +22,7 @@ def initialize(bioguide_id, fields)
     end
 
     def order_fields
-      order = %w($NAME_PREFIX $NAME_FIRST $NAME_LAST $PHONE $EMAIL $SUBJECT $TOPIC)
+      order = %w[$NAME_PREFIX $NAME_FIRST $NAME_LAST $PHONE $EMAIL $SUBJECT $TOPIC]
       @fields = @fields.sort_by { |f| order.index(f.value) || Float::INFINITY }
     end
 
@@ -46,6 +47,7 @@ def validate(input)
       return false if input.nil?
       return false if max_length && input.length > max_length
       return false unless options.nil? || options.include?(input)
+
       true
     end
 
@@ -72,9 +74,10 @@ def hash
     end
 
     def options_hash
-      if @value == "$ADDRESS_STATE_POSTAL_ABBREV"
+      case @value
+      when "$ADDRESS_STATE_POSTAL_ABBREV"
         Places.us_state_codes
-      elsif @value == "$ADDRESS_STATE_FULL"
+      when "$ADDRESS_STATE_FULL"
         Places.us_states
       else
         @options_hash
@@ -83,6 +86,7 @@ def options_hash
 
     def options
       return options_hash.values if options_hash.is_a?(Hash)
+
       options_hash
     end
   end
@@ -95,7 +99,7 @@ def self.date_fills_path(campaign_tag = nil, start_date = nil, end_date = nil, b
     params = {
       date_start: start_date,
       date_end: end_date,
-      campaign_tag: campaign_tag,
+      campaign_tag: campaign_tag
     }.compact
     data_path("/successful-fills-by-date/", params, bioguide_id)
   end
@@ -110,30 +114,26 @@ def self.date_fills(*args)
 
   def self.data_path(base_path, params = {}, bioguide_id = nil)
     base_path += bioguide_id unless bioguide_id.nil?
-    base_path += "?" + {
-      debug_key: Rails.application.secrets.congress_forms_debug_key,
+    "#{base_path}?" + {
+      debug_key: Rails.application.secrets.congress_forms_debug_key
     }.merge(params).to_query
   end
 
   def self.get(path)
-    begin
-      JSON.parse RestClient.get(base_url + path)
-    rescue RestClient::ExceptionWithResponse => e
-      Raven.capture_exception(e)
-      Rails.logger.error e
-      return {}
-    end
+    JSON.parse RestClient.get(base_url + path)
+  rescue RestClient::ExceptionWithResponse => e
+    Raven.capture_exception(e)
+    Rails.logger.error e
+    {}
   end
 
   def self.post(path, body = {})
-    begin
-      JSON.parse RestClient.post(base_url + path, body.to_json,
-                                 { content_type: :json, accept: :json })
-    rescue RestClient::ExceptionWithResponse => e
-      Raven.capture_exception(e)
-      Rails.logger.error e
-      raise RequestFailed
-    end
+    JSON.parse RestClient.post(base_url + path, body.to_json,
+                               { content_type: :json, accept: :json })
+  rescue RestClient::ExceptionWithResponse => e
+    Raven.capture_exception(e)
+    Rails.logger.error e
+    raise RequestFailed
   end
 
   def self.base_url
diff --git a/lib/places.rb b/app/lib/places.rb
similarity index 53%
rename from lib/places.rb
rename to app/lib/places.rb
index 4809d8342..d29c96107 100644
--- a/lib/places.rb
+++ b/app/lib/places.rb
@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+# rubocop:disable Metrics/CollectionLiteralLength
 module Places
   def self.us_state_codes
     { "Alabama" => "AL",
@@ -69,193 +70,193 @@ def self.us_states
 
   def self.country_codes
     [
-      ["Afghanistan", "AF"],
+      %w[Afghanistan AF],
       ["Aland Islands", "AX"],
-      ["Albania", "AL"],
-      ["Algeria", "DZ"],
+      %w[Albania AL],
+      %w[Algeria DZ],
       ["American Samoa", "AS"],
-      ["Andorra", "AD"],
-      ["Angola", "AO"],
-      ["Anguilla", "AI"],
-      ["Antarctica", "AQ"],
+      %w[Andorra AD],
+      %w[Angola AO],
+      %w[Anguilla AI],
+      %w[Antarctica AQ],
       ["Antigua and Barbuda", "AG"],
-      ["Argentina", "AR"],
-      ["Armenia", "AM"],
-      ["Aruba", "AW"],
+      %w[Argentina AR],
+      %w[Armenia AM],
+      %w[Aruba AW],
       ["Ascension Island", "AC"],
-      ["Australia", "AU"],
-      ["Austria", "AT"],
-      ["Azerbaijan", "AZ"],
-      ["Bahamas", "BS"],
-      ["Bahrain", "BH"],
-      ["Bangladesh", "BD"],
-      ["Barbados", "BB"],
-      ["Belarus", "BY"],
-      ["Belgium", "BE"],
-      ["Belize", "BZ"],
-      ["Benin", "BJ"],
-      ["Bermuda", "BM"],
-      ["Bhutan", "BT"],
+      %w[Australia AU],
+      %w[Austria AT],
+      %w[Azerbaijan AZ],
+      %w[Bahamas BS],
+      %w[Bahrain BH],
+      %w[Bangladesh BD],
+      %w[Barbados BB],
+      %w[Belarus BY],
+      %w[Belgium BE],
+      %w[Belize BZ],
+      %w[Benin BJ],
+      %w[Bermuda BM],
+      %w[Bhutan BT],
       ["Bolivia, Plurinational State of", "BO"],
       ["Bonaire, Sint Eustatius and Saba", "BQ"],
       ["Bosnia and Herzegovina", "BA"],
-      ["Botswana", "BW"],
+      %w[Botswana BW],
       ["Bouvet Island", "BV"],
-      ["Brazil", "BR"],
+      %w[Brazil BR],
       ["British Indian Ocean Territory", "IO"],
       ["Brunei Darussalam", "BN"],
-      ["Bulgaria", "BG"],
+      %w[Bulgaria BG],
       ["Burkina Faso", "BF"],
-      ["Burundi", "BI"],
-      ["Cambodia", "KH"],
-      ["Cameroon", "CM"],
-      ["Canada", "CA"],
+      %w[Burundi BI],
+      %w[Cambodia KH],
+      %w[Cameroon CM],
+      %w[Canada CA],
       ["Cape Verde", "CV"],
       ["Cayman Islands", "KY"],
       ["Central African Republic", "CF"],
-      ["Chad", "TD"],
-      ["Chile", "CL"],
-      ["China", "CN"],
+      %w[Chad TD],
+      %w[Chile CL],
+      %w[China CN],
       ["Christmas Island", "CX"],
       ["Cocos (Keeling) Islands", "CC"],
-      ["Colombia", "CO"],
-      ["Comoros", "KM"],
-      ["Congo", "CG"],
+      %w[Colombia CO],
+      %w[Comoros KM],
+      %w[Congo CG],
       ["Congo, the Democratic Republic of the", "CD"],
       ["Cook Islands", "CK"],
       ["Costa Rica", "CR"],
       ["Cote d'Ivoire", "CI"],
-      ["Croatia", "HR"],
-      ["Cuba", "CU"],
-      ["Curacao", "CW"],
-      ["Cyprus", "CY"],
+      %w[Croatia HR],
+      %w[Cuba CU],
+      %w[Curacao CW],
+      %w[Cyprus CY],
       ["Czech Republic", "CZ"],
-      ["Denmark", "DK"],
-      ["Djibouti", "DJ"],
-      ["Dominica", "DM"],
+      %w[Denmark DK],
+      %w[Djibouti DJ],
+      %w[Dominica DM],
       ["Dominican Republic", "DO"],
-      ["Ecuador", "EC"],
-      ["Egypt", "EG"],
+      %w[Ecuador EC],
+      %w[Egypt EG],
       ["El Salvador", "SV"],
       ["Equatorial Guinea", "GQ"],
-      ["Eritrea", "ER"],
-      ["Estonia", "EE"],
-      ["Ethiopia", "ET"],
+      %w[Eritrea ER],
+      %w[Estonia EE],
+      %w[Ethiopia ET],
       ["Falkland Islands (Malvinas)", "FK"],
       ["Faroe Islands", "FO"],
-      ["Fiji", "FJ"],
-      ["Finland", "FI"],
-      ["France", "FR"],
+      %w[Fiji FJ],
+      %w[Finland FI],
+      %w[France FR],
       ["French Guiana", "GF"],
       ["French Polynesia", "PF"],
       ["French Southern Territories", "TF"],
-      ["Gabon", "GA"],
-      ["Gambia", "GM"],
-      ["Georgia", "GE"],
-      ["Germany", "DE"],
-      ["Ghana", "GH"],
-      ["Gibraltar", "GI"],
-      ["Greece", "GR"],
-      ["Greenland", "GL"],
-      ["Grenada", "GD"],
-      ["Guadeloupe", "GP"],
-      ["Guam", "GU"],
-      ["Guatemala", "GT"],
-      ["Guernsey", "GG"],
-      ["Guinea", "GN"],
-      ["Guinea-Bissau", "GW"],
-      ["Guyana", "GY"],
-      ["Haiti", "HT"],
+      %w[Gabon GA],
+      %w[Gambia GM],
+      %w[Georgia GE],
+      %w[Germany DE],
+      %w[Ghana GH],
+      %w[Gibraltar GI],
+      %w[Greece GR],
+      %w[Greenland GL],
+      %w[Grenada GD],
+      %w[Guadeloupe GP],
+      %w[Guam GU],
+      %w[Guatemala GT],
+      %w[Guernsey GG],
+      %w[Guinea GN],
+      %w[Guinea-Bissau GW],
+      %w[Guyana GY],
+      %w[Haiti HT],
       ["Heard Island and McDonald Islands", "HM"],
       ["Holy See (Vatican City State)", "VA"],
-      ["Honduras", "HN"],
+      %w[Honduras HN],
       ["Hong Kong", "HK"],
-      ["Hungary", "HU"],
-      ["Iceland", "IS"],
-      ["India", "IN"],
-      ["Indonesia", "ID"],
+      %w[Hungary HU],
+      %w[Iceland IS],
+      %w[India IN],
+      %w[Indonesia ID],
       ["Iran, Islamic Republic of", "IR"],
-      ["Iraq", "IQ"],
-      ["Ireland", "IE"],
+      %w[Iraq IQ],
+      %w[Ireland IE],
       ["Isle of Man", "IM"],
-      ["Israel", "IL"],
-      ["Italy", "IT"],
-      ["Jamaica", "JM"],
-      ["Japan", "JP"],
-      ["Jersey", "JE"],
-      ["Jordan", "JO"],
-      ["Kazakhstan", "KZ"],
-      ["Kenya", "KE"],
-      ["Kiribati", "KI"],
+      %w[Israel IL],
+      %w[Italy IT],
+      %w[Jamaica JM],
+      %w[Japan JP],
+      %w[Jersey JE],
+      %w[Jordan JO],
+      %w[Kazakhstan KZ],
+      %w[Kenya KE],
+      %w[Kiribati KI],
       ["Korea, Democratic People's Republic of", "KP"],
       ["Korea, Republic of", "KR"],
-      ["Kosovo", "KV"],
-      ["Kuwait", "KW"],
-      ["Kyrgyzstan", "KG"],
+      %w[Kosovo KV],
+      %w[Kuwait KW],
+      %w[Kyrgyzstan KG],
       ["Lao People's Democratic Republic", "LA"],
-      ["Latvia", "LV"],
-      ["Lebanon", "LB"],
-      ["Lesotho", "LS"],
-      ["Liberia", "LR"],
-      ["Libya", "LY"],
-      ["Liechtenstein", "LI"],
-      ["Lithuania", "LT"],
-      ["Luxembourg", "LU"],
-      ["Macao", "MO"],
+      %w[Latvia LV],
+      %w[Lebanon LB],
+      %w[Lesotho LS],
+      %w[Liberia LR],
+      %w[Libya LY],
+      %w[Liechtenstein LI],
+      %w[Lithuania LT],
+      %w[Luxembourg LU],
+      %w[Macao MO],
       ["Macedonia, The Former Yugoslav Republic Of", "MK"],
-      ["Madagascar", "MG"],
-      ["Malawi", "MW"],
-      ["Malaysia", "MY"],
-      ["Maldives", "MV"],
-      ["Mali", "ML"],
-      ["Malta", "MT"],
+      %w[Madagascar MG],
+      %w[Malawi MW],
+      %w[Malaysia MY],
+      %w[Maldives MV],
+      %w[Mali ML],
+      %w[Malta MT],
       ["Marshall Islands", "MH"],
-      ["Martinique", "MQ"],
-      ["Mauritania", "MR"],
-      ["Mauritius", "MU"],
-      ["Mayotte", "YT"],
-      ["Mexico", "MX"],
+      %w[Martinique MQ],
+      %w[Mauritania MR],
+      %w[Mauritius MU],
+      %w[Mayotte YT],
+      %w[Mexico MX],
       ["Micronesia, Federated States of", "FM"],
       ["Moldova, Republic of", "MD"],
-      ["Monaco", "MC"],
-      ["Mongolia", "MN"],
-      ["Montenegro", "ME"],
-      ["Montserrat", "MS"],
-      ["Morocco", "MA"],
-      ["Mozambique", "MZ"],
-      ["Myanmar", "MM"],
-      ["Namibia", "NA"],
-      ["Nauru", "NR"],
-      ["Nepal", "NP"],
-      ["Netherlands", "NL"],
+      %w[Monaco MC],
+      %w[Mongolia MN],
+      %w[Montenegro ME],
+      %w[Montserrat MS],
+      %w[Morocco MA],
+      %w[Mozambique MZ],
+      %w[Myanmar MM],
+      %w[Namibia NA],
+      %w[Nauru NR],
+      %w[Nepal NP],
+      %w[Netherlands NL],
       ["Netherlands Antilles", "AN"],
       ["New Caledonia", "NC"],
       ["New Zealand", "NZ"],
-      ["Nicaragua", "NI"],
-      ["Niger", "NE"],
-      ["Nigeria", "NG"],
-      ["Niue", "NU"],
+      %w[Nicaragua NI],
+      %w[Niger NE],
+      %w[Nigeria NG],
+      %w[Niue NU],
       ["Norfolk Island", "NF"],
       ["Northern Mariana Islands", "MP"],
-      ["Norway", "NO"],
-      ["Oman", "OM"],
-      ["Pakistan", "PK"],
-      ["Palau", "PW"],
+      %w[Norway NO],
+      %w[Oman OM],
+      %w[Pakistan PK],
+      %w[Palau PW],
       ["Palestinian Territory, Occupied", "PS"],
-      ["Panama", "PA"],
+      %w[Panama PA],
       ["Papua New Guinea", "PG"],
-      ["Paraguay", "PY"],
-      ["Peru", "PE"],
-      ["Philippines", "PH"],
-      ["Pitcairn", "PN"],
-      ["Poland", "PL"],
-      ["Portugal", "PT"],
+      %w[Paraguay PY],
+      %w[Peru PE],
+      %w[Philippines PH],
+      %w[Pitcairn PN],
+      %w[Poland PL],
+      %w[Portugal PT],
       ["Puerto Rico", "PR"],
-      ["Qatar", "QA"],
-      ["Reunion", "RE"],
-      ["Romania", "RO"],
+      %w[Qatar QA],
+      %w[Reunion RE],
+      %w[Romania RO],
       ["Russian Federation", "RU"],
-      ["Rwanda", "RW"],
+      %w[Rwanda RW],
       ["Saint Barthelemy", "BL"],
       ["Saint Helena, Ascension and Tristan da Cunha", "SH"],
       ["Saint Kitts and Nevis", "KN"],
@@ -263,66 +264,66 @@ def self.country_codes
       ["Saint Martin (French part)", "MF"],
       ["Saint Pierre and Miquelon", "PM"],
       ["Saint Vincent and the Grenadines", "VC"],
-      ["Samoa", "WS"],
+      %w[Samoa WS],
       ["San Marino", "SM"],
       ["Sao Tome and Principe", "ST"],
       ["Saudi Arabia", "SA"],
-      ["Senegal", "SN"],
-      ["Serbia", "RS"],
-      ["Seychelles", "SC"],
+      %w[Senegal SN],
+      %w[Serbia RS],
+      %w[Seychelles SC],
       ["Sierra Leone", "SL"],
-      ["Singapore", "SG"],
+      %w[Singapore SG],
       ["Sint Maarten (Dutch part)", "SX"],
-      ["Slovakia", "SK"],
-      ["Slovenia", "SI"],
+      %w[Slovakia SK],
+      %w[Slovenia SI],
       ["Solomon Islands", "SB"],
-      ["Somalia", "SO"],
+      %w[Somalia SO],
       ["South Africa", "ZA"],
       ["South Georgia and the South Sandwich Islands", "GS"],
       ["South Sudan, Republic of", "SS"],
-      ["Spain", "ES"],
+      %w[Spain ES],
       ["Sri Lanka", "LK"],
-      ["Sudan", "SD"],
-      ["Suriname", "SR"],
+      %w[Sudan SD],
+      %w[Suriname SR],
       ["Svalbard and Jan Mayen", "SJ"],
-      ["Swaziland", "SZ"],
-      ["Sweden", "SE"],
-      ["Switzerland", "CH"],
+      %w[Swaziland SZ],
+      %w[Sweden SE],
+      %w[Switzerland CH],
       ["Syrian Arab Republic", "SY"],
-      ["Taiwan", "TW"],
-      ["Tajikistan", "TJ"],
+      %w[Taiwan TW],
+      %w[Tajikistan TJ],
       ["Tanzania, United Republic of", "TZ"],
-      ["Thailand", "TH"],
-      ["Timor-Leste", "TL"],
-      ["Togo", "TG"],
-      ["Tokelau", "TK"],
-      ["Tonga", "TO"],
+      %w[Thailand TH],
+      %w[Timor-Leste TL],
+      %w[Togo TG],
+      %w[Tokelau TK],
+      %w[Tonga TO],
       ["Trinidad and Tobago", "TT"],
       ["Tristan da Cunha", "TA"],
-      ["Tunisia", "TN"],
-      ["Turkey", "TR"],
-      ["Turkmenistan", "TM"],
+      %w[Tunisia TN],
+      %w[Turkey TR],
+      %w[Turkmenistan TM],
       ["Turks and Caicos Islands", "TC"],
-      ["Tuvalu", "TV"],
-      ["Uganda", "UG"],
-      ["Ukraine", "UA"],
+      %w[Tuvalu TV],
+      %w[Uganda UG],
+      %w[Ukraine UA],
       ["United Arab Emirates", "AE"],
       ["United Kingdom", "GB"],
       ["United States", "US"],
       ["United States Minor Outlying Islands", "UM"],
-      ["Uruguay", "UY"],
-      ["Uzbekistan", "UZ"],
-      ["Vanuatu", "VU"],
+      %w[Uruguay UY],
+      %w[Uzbekistan UZ],
+      %w[Vanuatu VU],
       ["Venezuela, Bolivarian Republic of", "VE"],
       ["Viet Nam", "VN"],
       ["Virgin Islands, British", "VG"],
       ["Virgin Islands, U.S.", "VI"],
       ["Wallis and Futuna", "WF"],
       ["Western Sahara", "EH"],
-      ["Yemen", "YE"],
-      ["Zambia", "ZM"],
-      ["Zimbabwe", "ZW"]
+      %w[Yemen YE],
+      %w[Zambia ZM],
+      %w[Zimbabwe ZW]
     ].freeze
   end
-
 end
+# rubocop:enable Metrics/CollectionLiteralLength
diff --git a/app/lib/quotes.rb b/app/lib/quotes.rb
new file mode 100644
index 000000000..fff4641d2
--- /dev/null
+++ b/app/lib/quotes.rb
@@ -0,0 +1,11 @@
+module Quotes
+  def self.get
+    quotes.sample
+  end
+
+  def self.quotes
+    @quotes ||= YAML.load_file("config/custom_quotes.yml")
+  rescue Errno::ENOENT
+    @quotes ||= YAML.load_file("config/quotes.yml")
+  end
+end
diff --git a/lib/related_content.rb b/app/lib/related_content.rb
similarity index 98%
rename from lib/related_content.rb
rename to app/lib/related_content.rb
index ab5cd05a6..6e3fc3066 100644
--- a/lib/related_content.rb
+++ b/app/lib/related_content.rb
@@ -5,11 +5,12 @@ def initialize(url)
 
   def load
     return if url.blank?
+
     begin
       open_page
       @loaded_successfully = true
     rescue OpenURI::HTTPError
-      return
+      nil
     end
   end
 
@@ -23,6 +24,7 @@ def title
 
   def image
     return @image if @image
+
     og_url = page.css("meta[property='og:image']")
     @image = if og_url.blank?
                ""
diff --git a/lib/smarty_streets.rb b/app/lib/smarty_streets.rb
similarity index 75%
rename from lib/smarty_streets.rb
rename to app/lib/smarty_streets.rb
index b7d004434..a9a65d283 100644
--- a/lib/smarty_streets.rb
+++ b/app/lib/smarty_streets.rb
@@ -3,15 +3,13 @@ module SmartyStreets
   def self.get_city_state(zipcode)
     url = "https://us-zipcode.api.smartystreets.com/lookup"
     res = post(url, base_params.merge(zipcode: zipcode))
-    if res && !res.empty?
-      res.first["city_states"].try :first
-    end
+    res.first["city_states"].try :first if res.present?
   end
 
   def self.get_location(street, zipcode)
     url = "https://api.smartystreets.com/street-address"
     res = post(url, base_params.merge(street: street, zipcode: zipcode))
-    raise AddressNotFound if !res || res.empty?
+    raise AddressNotFound if res.blank?
 
     location = OpenStruct.new
     location.street = street
@@ -21,7 +19,7 @@ def self.get_location(street, zipcode)
     location.state = res[0]["components"]["state_abbreviation"]
     location.district = res[0]["metadata"]["congressional_district"]
     location.district = "0" if location.district == "AL"
-    return location
+    location
   end
 
   def self.get_congressional_district(street, zipcode)
@@ -31,17 +29,12 @@ def self.get_congressional_district(street, zipcode)
 
   class AddressNotFound < StandardError; end
 
-  private
-
   def self.post(url, params)
-    begin
-      res = JSON.parse RestClient.get("#{url}?#{params.to_query}")
-      return res
-    rescue => e
-      Raven.capture_exception(e)
-      Rails.logger.error "#{ e } (#{ e.class })!"
-      return false
-    end
+    JSON.parse RestClient.get("#{url}?#{params.to_query}")
+  rescue StandardError => e
+    Raven.capture_exception(e)
+    Rails.logger.error "#{e} (#{e.class})!"
+    false
   end
 
   def self.base_params
diff --git a/app/mailers/user_mailer.rb b/app/mailers/user_mailer.rb
index 185fde7cd..7609415fe 100644
--- a/app/mailers/user_mailer.rb
+++ b/app/mailers/user_mailer.rb
@@ -12,7 +12,7 @@ def thanks_message(email, actionPage, options = {})
     mail(to: email, subject: "Thanks for taking action")
   end
 
-  def signup_attempt_with_existing_email(user, options = {})
+  def signup_attempt_with_existing_email(user, _options = {})
     @user = user
     @email = user.email
     @token = user.reset_password_token
@@ -22,8 +22,6 @@ def signup_attempt_with_existing_email(user, options = {})
   private
 
   def check_bounces
-    unless Bounce.find_by_email(@email.downcase).nil?
-      mail.perform_deliveries = false
-    end
+    mail.perform_deliveries = false unless Bounce.find_by(email: @email.downcase).nil?
   end
 end
diff --git a/app/models/action_institution.rb b/app/models/action_institution.rb
index d1491f79d..cd57fab1f 100644
--- a/app/models/action_institution.rb
+++ b/app/models/action_institution.rb
@@ -1,10 +1,11 @@
-class ActionInstitution < ActiveRecord::Base
+class ActionInstitution < ApplicationRecord
   belongs_to :institution
   belongs_to :action_page
 
   def self.add(action_page:, category:, reset: false)
     return unless action_page.enable_petition &&
-      action_page.petition.enable_affiliations
+                  action_page.petition.enable_affiliations
+
     action_page.action_institutions.delete_all if reset == "1"
     institution_ids = Institution.where(category: category).pluck(:id)
     fast_create(action_page_id: action_page.id, institution_ids: institution_ids)
@@ -33,5 +34,5 @@ def self.fast_create(action_page_id:, institution_ids:)
   # * Check if there are any duplicates in production
   # * If so, remove them in a way that doesn't break anything else
   # * Uncomment the following line
-  #validates_uniqueness_of :institution_id, scope: :action_page_id
+  # validates_uniqueness_of :institution_id, scope: :action_page_id
 end
diff --git a/app/models/action_page.rb b/app/models/action_page.rb
index 104a5149a..3c1de0d97 100644
--- a/app/models/action_page.rb
+++ b/app/models/action_page.rb
@@ -1,28 +1,28 @@
-class ActionPage < ActiveRecord::Base
-  extend FriendlyId, AmazonCredentials
+class ActionPage < ApplicationRecord
+  extend FriendlyId
 
-  include PgSearch
+  include PgSearch::Model
   pg_search_scope :search,
-                  against: [
-                    :title,
-                    :slug,
-                    :summary,
-                    :description,
-                    :email_text,
+                  against: %i[
+                    title
+                    slug
+                    summary
+                    description
+                    email_text
                   ],
                   associated_against: {
-                    call_campaign: [:title, :message],
-                    congress_message_campaign: [:subject, :message, :campaign_tag],
-                    email_campaign: [:subject, :message],
-                    petition: [:title, :description],
-                    tweet: [:target, :message, :cta]
+                    call_campaign: %i[title message],
+                    congress_message_campaign: %i[subject message campaign_tag],
+                    email_campaign: %i[subject message],
+                    petition: %i[title description],
+                    tweet: %i[target message cta]
                   },
                   using: { tsearch: { prefix: true } }
 
-  friendly_id :title, use: [:slugged, :history]
+  friendly_id :title, use: %i[slugged history]
   scope :published, -> { where(published: true) }
 
-  has_many :events, class_name: Ahoy::Event
+  has_many :events, class_name: "Ahoy::Event"
   has_many :partnerships
   has_many :partners, through: :partnerships
   has_many :action_institutions
@@ -36,25 +36,19 @@ class ActionPage < ActiveRecord::Base
   belongs_to :call_campaign
   belongs_to :category, optional: true
   belongs_to :active_action_page_for_redirect, class_name: "ActionPage",
-             foreign_key: "archived_redirect_action_page_id"
+                                               foreign_key: "archived_redirect_action_page_id"
+
   belongs_to :author, class_name: "User", foreign_key: :user_id, optional: true
 
+
   accepts_nested_attributes_for :tweet, :petition, :email_campaign,
-    :call_campaign, :congress_message_campaign, :affiliation_types, :partnerships,
-    reject_if: :all_blank
-
-  has_attached_file :featured_image, amazon_credentials.merge(default_url: "missing.png")
-  has_attached_file :background_image, amazon_credentials
-  has_attached_file :og_image, amazon_credentials
-  validates_media_type_spoof_detection :featured_image,
-    if: -> { featured_image.present? && featured_image_file_name_came_from_user? }
-  validates_media_type_spoof_detection :background_image,
-    if: -> { background_image.present? && background_image_file_name_came_from_user? }
-  validates_media_type_spoof_detection :og_image,
-    if: -> { og_image.present? && og_image_file_name_came_from_user? }
-  do_not_validate_attachment_file_type [:featured_image, :background_image, :og_image]
-
-  #validates_length_of :og_title, maximum: 65
+                                :call_campaign, :congress_message_campaign, :affiliation_types, :partnerships,
+                                reject_if: :all_blank
+
+  mount_uploader :featured_image, ActionPageImageUploader, mount_on: :featured_image_file_name
+  mount_uploader :background_image, ActionPageImageUploader, mount_on: :background_image_file_name
+  mount_uploader :og_image, ActionPageImageUploader, mount_on: :og_image_file_name
+
   after_save :no_drafts_on_homepage
   after_save :set_congress_tag, if: -> { enable_congress_message }
 
@@ -62,18 +56,16 @@ class ActionPage < ActiveRecord::Base
 
   def self.type(*types)
     scopes = Array(types).flatten.map do |t|
-      unless %w(call congress_message email petition tweet redirect).include?(t)
-        raise ArgumentError, "unrecognized type #{t}"
-      end
+      raise ArgumentError, "unrecognized type #{t}" unless %w[call congress_message email petition tweet redirect].include?(t)
 
-      where(:"enable_#{t}" => true)
+      where("enable_#{t}": true)
     end
 
     scopes.inject(:or) || all
   end
 
   def action_type
-    %w(call congress_message email petition tweet redirect).each do |type|
+    %w[call congress_message email petition tweet redirect].each do |type|
       return type.titleize if self[:"enable_#{type}"]
     end
 
@@ -81,9 +73,8 @@ def action_type
   end
 
   def self.status(status)
-    unless %w(archived victory live draft).include?(status)
-      raise ArgumentError, "unrecognized status #{status}"
-    end
+    raise ArgumentError, "unrecognized status #{status}" unless %w[archived victory live draft].include?(status)
+
     case status
     when "live"
       where(published: true, archived: false, victory: false)
@@ -106,14 +97,14 @@ def should_generate_new_friendly_id?
 
   def call_tool_title
     call_campaign &&
-      call_campaign.title.length > 0 &&
+      !call_campaign.title.empty? &&
       call_campaign.title ||
       "Call Your Legislators"
   end
 
   def message_rendered
     # TODO: just write a test for this and rename this to .to_md
-    call_campaign && call_campaign.message || ""
+    call_campaign&.message || ""
   end
 
   def verb
@@ -151,6 +142,7 @@ def image
 
   def actions_taken_percent
     return 0 if view_count == 0
+
     @percent ||= (action_count / view_count.to_f) * 100
   end
 
@@ -195,7 +187,8 @@ def no_drafts_on_homepage
   end
 
   def set_congress_tag
-    return unless congress_message_campaign.campaign_tag.blank?
+    return if congress_message_campaign.campaign_tag.present?
+
     congress_message_campaign.update(campaign_tag: slug)
   end
 end
diff --git a/app/models/affiliation.rb b/app/models/affiliation.rb
index 39a8b3c7f..3034772e2 100644
--- a/app/models/affiliation.rb
+++ b/app/models/affiliation.rb
@@ -1,4 +1,4 @@
-class Affiliation < ActiveRecord::Base
+class Affiliation < ApplicationRecord
   belongs_to :action_page
   belongs_to :signature
   belongs_to :affiliation_type
diff --git a/app/models/affiliation_type.rb b/app/models/affiliation_type.rb
index 3a83e66b7..9a084ab4a 100644
--- a/app/models/affiliation_type.rb
+++ b/app/models/affiliation_type.rb
@@ -1,4 +1,4 @@
-class AffiliationType < ActiveRecord::Base
+class AffiliationType < ApplicationRecord
   belongs_to :action_page
   has_many :affiliations
 end
diff --git a/app/models/ahoy/event.rb b/app/models/ahoy/event.rb
index 942bfae6e..fe7322748 100644
--- a/app/models/ahoy/event.rb
+++ b/app/models/ahoy/event.rb
@@ -1,17 +1,16 @@
 module Ahoy
-  class Event < ActiveRecord::Base
+  class Event < ApplicationRecord
     self.table_name = "ahoy_events"
 
     belongs_to :visit
     belongs_to :user
     belongs_to :action_page
     counter_culture :action_page, column_name: proc { |record|
-      if record.name == "Action"
+      case record.name
+      when "Action"
         "action_count"
-      elsif record.name == "View"
+      when "View"
         "view_count"
-      else
-        nil
       end
     }
 
@@ -22,25 +21,23 @@ class Event < ActiveRecord::Base
     scope :calls,      -> { where("properties ->> 'actionType' = 'call'") }
     scope :signatures, -> { where("properties ->> 'actionType' = 'signature'") }
     scope :tweets,     -> { where("properties ->> 'actionType' = 'tweet'") }
-    scope :on_page,    -> (id) { where(action_page_id: id) }
-    scope :in_range, ->(start_date, end_date) {
+    scope :on_page,    ->(id) { where(action_page_id: id) }
+    scope :in_range, lambda { |start_date, end_date|
       where(time: start_date..end_date.tomorrow)
     }
 
-    before_save :user_opt_out
-    before_save :anonymize_views
     after_create :record_civicrm
 
-    TYPES = %i(views emails tweets calls signatures congress_messages).freeze
+    TYPES = %i[views emails tweets calls signatures congress_messages].freeze
 
     def self.action_types(action_page = nil)
       TYPES.dup.tap do |t|
         if action_page.present?
-          t.delete(:calls) if !action_page.enable_call
-          t.delete(:congress_messages) if !action_page.enable_congress_message
-          t.delete(:emails) if !action_page.enable_email
-          t.delete(:signatures) if !action_page.enable_petition
-          t.delete(:tweets) if !action_page.enable_tweet
+          t.delete(:calls) unless action_page.enable_call
+          t.delete(:congress_messages) unless action_page.enable_congress_message
+          t.delete(:emails) unless action_page.enable_email
+          t.delete(:signatures) unless action_page.enable_petition
+          t.delete(:tweets) unless action_page.enable_tweet
         end
       end
     end
@@ -86,20 +83,9 @@ def self.summary
       { view: views.count, action: actions.count }
     end
 
-    def user_opt_out
-      if user
-         user_id = nil unless user.record_activity?
-      end
-    end
-
     def record_civicrm
-      if name == "Action" && user && action_page_id
-        user.add_civicrm_activity! action_page_id
-      end
-    end
-
-    def anonymize_views
-      self.user_id = nil if name == "View"
+      return unless name == "Action" && user && action_page_id
+      user.add_civicrm_activity! action_page_id
     end
   end
 end
diff --git a/app/models/application_record.rb b/app/models/application_record.rb
new file mode 100644
index 000000000..10a4cba84
--- /dev/null
+++ b/app/models/application_record.rb
@@ -0,0 +1,3 @@
+class ApplicationRecord < ActiveRecord::Base
+  self.abstract_class = true
+end
diff --git a/app/models/bounce.rb b/app/models/bounce.rb
index a3deb6c0a..c1780fdaa 100644
--- a/app/models/bounce.rb
+++ b/app/models/bounce.rb
@@ -1,2 +1,2 @@
-class Bounce < ActiveRecord::Base
+class Bounce < ApplicationRecord
 end
diff --git a/app/models/call_campaign.rb b/app/models/call_campaign.rb
index 37c8f7d9d..dd8c55198 100644
--- a/app/models/call_campaign.rb
+++ b/app/models/call_campaign.rb
@@ -1,3 +1,3 @@
-class CallCampaign < ActiveRecord::Base
+class CallCampaign < ApplicationRecord
   has_one :action_page
 end
diff --git a/app/models/category.rb b/app/models/category.rb
index e3960204f..aa92bc0c4 100644
--- a/app/models/category.rb
+++ b/app/models/category.rb
@@ -1,4 +1,4 @@
-class Category < ActiveRecord::Base
-  validates_presence_of :title
-  validates_format_of :title, with: /\A[\w\s&]+\Z/
+class Category < ApplicationRecord
+  validates :title, presence: true
+  validates :title, format: { with: /\A[\w\s&]+\Z/ }
 end
diff --git a/app/models/complaint.rb b/app/models/complaint.rb
index b0904e938..3b14e25b0 100644
--- a/app/models/complaint.rb
+++ b/app/models/complaint.rb
@@ -1,2 +1,2 @@
-class Complaint < ActiveRecord::Base
+class Complaint < ApplicationRecord
 end
diff --git a/app/models/congress_member.rb b/app/models/congress_member.rb
index 43317fa2f..83fc6d3dc 100644
--- a/app/models/congress_member.rb
+++ b/app/models/congress_member.rb
@@ -1,19 +1,19 @@
-class CongressMember < ActiveRecord::Base
-  validates_uniqueness_of :bioguide_id
+class CongressMember < ApplicationRecord
+  validates :bioguide_id, uniqueness: true
 
-  scope :current, -> { where("? <= term_end", Time.now) }
+  scope :current, -> { where("? <= term_end", Time.zone.now) }
 
-  scope :filter, ->(f) do
+  scope :search, lambda { |f|
     if f.present?
       fields = "first_name || ' ' || last_name || ' ' || full_name || ' ' || bioguide_id"
       where("LOWER(#{fields}) LIKE ?", "%#{f.downcase}%")
     else
       all
     end
-  end
+  }
 
   def current?
-    Time.now <= term_end
+    Time.zone.now <= term_end
   end
 
   def senate?
diff --git a/app/models/congress_message.rb b/app/models/congress_message.rb
index b67398c5e..29d382fef 100644
--- a/app/models/congress_message.rb
+++ b/app/models/congress_message.rb
@@ -7,11 +7,16 @@ class CongressMessage
   attr_accessor :forms, :campaign
   attr_writer :common_attributes, :member_attributes
 
-  ALWAYS_COMMON = %w($NAME_FIRST $NAME_LAST $ADDRESS_CITY $ADDRESS_STATE
-                     $ADDRESS_STREET $ADDRESS_ZIP5 $EMAIL).freeze
+  ALWAYS_COMMON = %w[$NAME_FIRST $NAME_LAST $ADDRESS_CITY $ADDRESS_STATE
+                     $ADDRESS_STREET $ADDRESS_ZIP5 $EMAIL].freeze
 
-  def common_attributes() @common_attributes || {}; end
-  def member_attributes() @member_attributes || {}; end
+  def common_attributes
+    @common_attributes || {}
+  end
+
+  def member_attributes
+    @member_attributes || {}
+  end
 
   def self.new_from_lookup(location, campaign, forms)
     common_attributes = {
@@ -20,13 +25,13 @@ def self.new_from_lookup(location, campaign, forms)
     }
     if location
       common_attributes.merge!({
-        "$ADDRESS_STREET" => location.street,
-        "$ADDRESS_CITY" => location.city,
-        "$ADDRESS_ZIP4" => location.zip4,
-        "$ADDRESS_ZIP5" => location.zipcode,
-        "$ADDRESS_STATE" => location.state,
-        "$ADDRESS_STATE_POSTAL_ABBREV" => location.state
-      })
+                                 "$ADDRESS_STREET" => location.street,
+                                 "$ADDRESS_CITY" => location.city,
+                                 "$ADDRESS_ZIP4" => location.zip4,
+                                 "$ADDRESS_ZIP5" => location.zipcode,
+                                 "$ADDRESS_STATE" => location.state,
+                                 "$ADDRESS_STATE_POSTAL_ABBREV" => location.state
+                               })
     end
     new({ common_attributes: common_attributes, forms: forms, campaign: campaign })
   end
@@ -45,7 +50,7 @@ def forms_minus_common_fields
     @forms.map do |form|
       form_minus = form.dup
       form_minus.fields = form.fields
-        .reject { |x| common_fields.include?(x) }
+                              .reject { |x| common_fields.include?(x) }
       form_minus
     end
   end
@@ -56,12 +61,15 @@ def targets
 
   def attributes_for(bioguide_id)
     return common_attributes unless member_attributes[bioguide_id]
+
     common_attributes.merge(member_attributes[bioguide_id])
   end
 
-  def background_submit(test = false)
-    if valid?
-      @forms.each { |f| f.delay.fill(attributes_for(f.bioguide_id), campaign.campaign_tag, test) }
+  def background_submit(test: false)
+    return unless valid?
+
+    @forms.each do |f|
+      f.delay.fill(attributes_for(f.bioguide_id), campaign.campaign_tag, test)
     end
   end
 
@@ -77,9 +85,7 @@ def attributes_satisfy_forms
     @forms.each do |form|
       attributes = attributes_for(form.bioguide_id)
       form.fields.each do |field|
-        if !field.validate(attributes[field.value])
-          errors.add(:base, "Invalid input for #{field.value}")
-        end
+        errors.add(:base, "Invalid input for #{field.value}") unless field.validate(attributes[field.value])
       end
     end
   end
diff --git a/app/models/congress_message_campaign.rb b/app/models/congress_message_campaign.rb
index 3ec85b171..3e2ee674e 100644
--- a/app/models/congress_message_campaign.rb
+++ b/app/models/congress_message_campaign.rb
@@ -1,4 +1,4 @@
-class CongressMessageCampaign < ActiveRecord::Base
+class CongressMessageCampaign < ApplicationRecord
   belongs_to :topic_category
   has_one :action_page
 
@@ -65,7 +65,7 @@ def target_specific_legislators
   private
 
   def target_bioguide_text_or_default(custom_text, default)
-    if !target_bioguide_ids or custom_text.blank?
+    if !target_bioguide_ids || custom_text.blank?
       default
     else
       custom_text
diff --git a/app/models/congress_scorecard.rb b/app/models/congress_scorecard.rb
index 092f922c8..ecca65aeb 100644
--- a/app/models/congress_scorecard.rb
+++ b/app/models/congress_scorecard.rb
@@ -2,7 +2,7 @@
 # petition action that drew in a signature from one of their constituents
 # So calling #counter on a model will display the number of signatures from
 # that member's constituents
-class CongressScorecard < ActiveRecord::Base
+class CongressScorecard < ApplicationRecord
   belongs_to :action_page
 
   def increment!
diff --git a/app/models/email_campaign.rb b/app/models/email_campaign.rb
index 604935b9b..fceb74b87 100644
--- a/app/models/email_campaign.rb
+++ b/app/models/email_campaign.rb
@@ -1,7 +1,10 @@
-class EmailCampaign < ActiveRecord::Base
+class EmailCampaign < ApplicationRecord
   belongs_to :topic_category
   has_one :action_page
 
+  # No DC
+  STATES = %w[AK AL AR AZ CA CO CT DE FL GA HI IA ID IL IN KS KY LA MA MD ME MI MN MO MS MT NC ND NE NH NJ NM NV NY OH OK OR PA RI SC SD TN TX UT VA VT WA WI WV WY].freeze
+
   def email_your_rep_text(default)
     target_bioguide_text_or_default alt_text_email_your_rep, default
   end
@@ -22,19 +25,40 @@ def extra_fields_explain_text(default)
     target_bioguide_text_or_default alt_text_extra_fields_explain, default
   end
 
+  def leg_level
+    return "legislatorLowerBody" if target_state_lower_chamber
+    return "legislatorUpperBody" if target_state_upper_chamber
+    return "headOfGovernment" if target_governor
+
+    ""
+  end
+
   include ERB::Util
 
-  def service_uri(service)
-    mailto_addresses = email_addresses.split(/\s*,\s*/).map do |email|
-      u(email.gsub(" ", "")).gsub("%40", "@")
+  def service_uri(service, opts = {})
+    mailto_addresses = opts[:email]
+    mailto_addresses ||= email_addresses
+    # look for custom email addresses set on the back end if there is no email param from the front-end,
+    # as is the case when we send state-level emails -- we cannot store these email address in our db,
+    # reason below:
+
+    # https://developers.google.com/terms#e_prohibitions_on_content
+    # Section 5.e.1., as of December 2022
+    # e. Prohibitions on Content
+    # Unless expressly permitted by the content owner or by applicable law, you will not, and will not permit your end users or others acting on your behalf to, do the following with content returned from the APIs:
+    # Scrape, build databases, or otherwise create permanent copies of such content, or keep cached copies longer than permitted by the cache header;
+
+    # results in comma-separated string of email addresses
+    default_mailto_addresses ||= mailto_addresses.split(/\s*,\s*/).map do |email|
+      u(email.delete(" ")).gsub("%40", "@").gsub("%2B", "+")
     end.join(",")
 
     {
-      default: "mailto:#{mailto_addresses}?#{query(body: message, subject: subject)}",
+      default: "mailto:#{default_mailto_addresses}?#{query(body: message, subject: subject)}",
 
-      gmail: "https://mail.google.com/mail/?view=cm&fs=1&#{{ to: email_addresses, body: message, su: subject }.to_query}",
+      gmail: "https://mail.google.com/mail/?view=cm&fs=1&#{{ to: mailto_addresses, body: message, su: subject }.to_query}",
 
-      hotmail: "https://outlook.live.com/default.aspx?rru=compose&#{{ to: email_addresses, body: message, subject: subject }.to_query}#page=Compose"
+      hotmail: "https://outlook.live.com/default.aspx?rru=compose&#{{ to: mailto_addresses, body: message, subject: subject }.to_query}#page=Compose"
     }.fetch(service.to_sym)
   end
 
@@ -48,7 +72,7 @@ def query(hash)
   end
 
   def target_bioguide_text_or_default(custom_text, default)
-    if !target_bioguide_id or custom_text.blank?
+    if !target_bioguide_id || custom_text.blank?
       default
     else
       custom_text
diff --git a/app/models/featured_action_page.rb b/app/models/featured_action_page.rb
index 78a0c3bae..60deafad2 100644
--- a/app/models/featured_action_page.rb
+++ b/app/models/featured_action_page.rb
@@ -1,6 +1,6 @@
-class FeaturedActionPage < ActiveRecord::Base
+class FeaturedActionPage < ApplicationRecord
   belongs_to :action_page
-  validates_presence_of :action_page, :weight
+  validates :action_page, :weight, presence: true
 
   def initialize(attributes = {})
     super(attributes.reverse_merge(weight: 0))
@@ -9,7 +9,8 @@ def initialize(attributes = {})
   def self.load_for_edit
     existing = order(:weight).preload(:action_page)
     return existing unless existing.length < 4
+
     weights_to_create = (1..4).to_a - existing.map(&:weight)
-    existing += weights_to_create.map { |w| new(weight: w) }
+    existing + weights_to_create.map { |w| new(weight: w) }
   end
 end
diff --git a/app/models/institution.rb b/app/models/institution.rb
index c81c09f8f..ef6a8d1ee 100644
--- a/app/models/institution.rb
+++ b/app/models/institution.rb
@@ -1,14 +1,14 @@
-class Institution < ActiveRecord::Base
+class Institution < ApplicationRecord
   require "csv"
   extend FriendlyId
 
-  friendly_id :name, use: [:slugged, :history]
+  friendly_id :name, use: %i[slugged history]
 
-  include PgSearch
+  include PgSearch::Model
   pg_search_scope :search,
-                  against: [
-                    :name,
-                    :category
+                  against: %i[
+                    name
+                    category
                   ],
                   using: { tsearch: { prefix: true } }
 
@@ -16,15 +16,16 @@ class Institution < ActiveRecord::Base
   has_many :action_pages, through: :action_institutions
   has_many :affiliations
 
-  validates_presence_of :name
-  validates_uniqueness_of :name
-  validates_presence_of :category
+  validates :name, presence: true
+  validates :name, uniqueness: true
+  validates :category, presence: true
 
   def self.process_csv(csv_file)
     [].tap do |names|
       CSV.foreach(csv_file.path, headers: true) do |row|
         row = row.to_hash
         return [] unless row["name"]
+
         names << row["name"]
       end
     end
@@ -39,22 +40,12 @@ def self.import(category, names)
   end
 
   def self.categories
-    all.distinct.pluck(:category)
-  end
-
-  # Sort institutions by most popular.
-  # Put `first` at the top of the list if it exists.
-  def self.top(n, first: 0)
-    select("institutions.*, COUNT(signatures.id) AS s_count")
-      .joins("LEFT OUTER JOIN affiliations ON institutions.id = affiliations.institution_id")
-      .joins("LEFT OUTER JOIN signatures ON affiliations.signature_id = signatures.id")
-      .group("institutions.id")
-      .order("institutions.id = #{first.to_i} desc", "s_count DESC", "institutions.name")
-      .limit(n)
+    distinct.pluck(:category)
   end
 
   def included_in_active_actions?
     return false if action_pages.empty?
+
     action_pages.map(&:status).any? "live"
   end
 end
diff --git a/app/models/partner.rb b/app/models/partner.rb
index 4f665124f..703d73799 100644
--- a/app/models/partner.rb
+++ b/app/models/partner.rb
@@ -1,17 +1,11 @@
-class Partner < ActiveRecord::Base
-  extend AmazonCredentials
+class Partner < ApplicationRecord
   acts_as_paranoid
   has_many :subscriptions
   has_many :users
   has_many :partnerships
   has_many :action_pages, through: :partnerships
-  has_attached_file :logo, amazon_credentials
-
-  validates_media_type_spoof_detection :logo,
-    if: -> { logo.present? && logo_file_name_came_from_user? }
-  do_not_validate_attachment_file_type [:logo]
-  validates_uniqueness_of :code
 
+  validates :code, uniqueness: true
 
   def to_csv(options = {})
     column_names = %w[first_name last_name email created_at]
diff --git a/app/models/partnership.rb b/app/models/partnership.rb
index 7f832d22b..0576af137 100644
--- a/app/models/partnership.rb
+++ b/app/models/partnership.rb
@@ -1,4 +1,4 @@
-class Partnership < ActiveRecord::Base
+class Partnership < ApplicationRecord
   belongs_to :partner
   belongs_to :action_page
 end
diff --git a/app/models/petition.rb b/app/models/petition.rb
index 6c864dc1b..6869f85fe 100644
--- a/app/models/petition.rb
+++ b/app/models/petition.rb
@@ -1,20 +1,21 @@
-class Petition < ActiveRecord::Base
+class Petition < ApplicationRecord
   has_one :action_page
   has_many :signatures
   after_initialize :set_goal
 
   def percent_complete
     return 0 if goal == 0
-    [signatures.count.to_f / goal.to_f, 1].min * 100
+
+    [signatures.count / goal.to_f, 1].min * 100
   end
 
   def recent_signatures(num)
     recent = []
-    signatures.last(num).reverse.each do |s|
+    signatures.last(num).reverse_each do |s|
       if s.anonymous
-        recent.push(s.as_json(only: [], methods: [:time_ago, :location]))
+        recent.push(s.as_json(only: [], methods: %i[time_ago location]))
       else
-        recent.push(s.as_json(only: [:first_name, :last_name, :city], methods: [:time_ago, :location]))
+        recent.push(s.as_json(only: %i[first_name last_name city], methods: %i[time_ago location]))
       end
     end
     recent
@@ -22,7 +23,7 @@ def recent_signatures(num)
 
   def signatures_by_institution(institution)
     signatures.includes(affiliations: :institution)
-      .where(institutions: { id: institution })
+              .where(institutions: { id: institution })
   end
 
   def location_required?
@@ -30,14 +31,12 @@ def location_required?
   end
 
   def to_s
-    "#{title}-exported_on-#{DateTime.now.strftime("%Y-%m-%d")}"
+    "#{title}-exported_on-#{DateTime.now.strftime('%Y-%m-%d')}"
   end
 
   private
 
   def set_goal
-    if new_record?
-      goal = 100
-    end
+    self.goal = 100 if new_record?
   end
 end
diff --git a/app/models/signature.rb b/app/models/signature.rb
index 7d797c471..ff7a34449 100644
--- a/app/models/signature.rb
+++ b/app/models/signature.rb
@@ -1,16 +1,16 @@
-include GoingPostal
+class Signature < ApplicationRecord
+  include GoingPostal
 
-class Signature < ActiveRecord::Base
-  belongs_to :user
+  belongs_to :user, optional: true
   belongs_to :petition
   has_many :affiliations
 
   before_validation :format_zipcode
-  before_save :sanitize_input
-  validates_presence_of :first_name, :last_name, :petition_id,
-    message: "This can't be blank."
+  before_validation :sanitize_input
+  validates :first_name, :last_name, :petition_id,
+            presence: { message: "This can't be blank." }
 
-  validates_presence_of :country_code, if: :location_required?
+  validates :country_code, presence: { if: :location_required? }
 
   validates :email, email: true
   validates :email, uniqueness: { scope: :petition_id,
@@ -20,15 +20,15 @@ class Signature < ActiveRecord::Base
 
   accepts_nested_attributes_for :affiliations, reject_if: :all_blank
 
-  scope :filter, ->(f) do
+  scope :search, lambda { |f|
     if f.present?
-      where("LOWER(email) LIKE ? " +
+      where("LOWER(email) LIKE ? " \
             "OR LOWER(first_name || ' ' || last_name) LIKE ?",
             "%#{f}%".downcase, "%#{f}%".downcase)
     else
       all
     end
-  end
+  }
 
   include ActionView::Helpers::DateHelper
 
@@ -38,7 +38,7 @@ def self.to_csv(options = {})
     CSV.generate(options) do |csv|
       csv << column_names
 
-      all.each do |sub|
+      find_each do |sub|
         csv << sub.attributes.values_at(*column_names)
       end
     end
@@ -47,22 +47,22 @@ def self.to_csv(options = {})
   def self.to_presentable_csv(options = {})
     column_names = %w[full_name email city state country]
 
-    CSV.generate(options) do |csv|
+    CSV.generate(**options) do |csv|
       csv << column_names
 
-      all.each do |signature|
+      find_each do |signature|
         csv << signature.to_csv_line
       end
     end
   end
 
   def self.to_affiliation_csv(options = {})
-    column_names = %w[full_name, institution, affiliation_type]
+    column_names = %w[full_name institution affiliation_type]
 
     CSV.generate(options) do |csv|
       csv << column_names
 
-      all.each do |s|
+      find_each do |s|
         affiliation = s.affiliations.first or next
 
         csv << [
@@ -75,18 +75,18 @@ def self.to_affiliation_csv(options = {})
   end
 
   def self.institutions
-    joins(affiliations: :institution).
-      distinct.pluck("institutions.name, institutions.id").sort
+    joins(affiliations: :institution)
+      .distinct.pluck("institutions.name, institutions.id").sort
   end
 
   def self.pretty_count
-    ActiveSupport::NumberHelper::number_to_delimited(self.count, delimiter: ",")
+    ActiveSupport::NumberHelper.number_to_delimited(count, delimiter: ",")
   end
 
   def arbitrary_opinion_of_country_string_validity
-    if country_code.present? and full_country_name.nil?
-      errors.add(:country_code, "Country Code might come from a spam bot.")
-    end
+    return unless country_code.present? && full_country_name.nil?
+
+    errors.add(:country_code, "Country Code might come from a spam bot.")
   end
 
   def name
@@ -118,17 +118,15 @@ def location_required?
   end
 
   def full_country_name
-    begin
-      IsoCountryCodes.find(country_code).name
-    rescue IsoCountryCodes::UnknownCodeError
-      nil
-    end
+    IsoCountryCodes.find(country_code).name
+  rescue IsoCountryCodes::UnknownCodeError
+    nil
   end
 
   private
 
   def format_zipcode
-    zipcode = GoingPostal.format_zipcode(zipcode, country_code) || zipcode
+    self.zipcode = GoingPostal.format_zipcode(zipcode, country_code) || zipcode
   end
 
   def sanitize_input
@@ -143,8 +141,8 @@ def sanitize_input
   end
 
   def validate_zipcode
-    unless GoingPostal.valid_zipcode?(zipcode, country_code)
-      errors.add(:zipcode, "Invalid zip/postal code for country")
-    end
+    return if GoingPostal.valid_zipcode?(zipcode, country_code)
+
+    errors.add(:zipcode, "Invalid zip/postal code for country")
   end
 end
diff --git a/app/models/source_file.rb b/app/models/source_file.rb
index 63b1022ca..8574ae639 100644
--- a/app/models/source_file.rb
+++ b/app/models/source_file.rb
@@ -1,7 +1,7 @@
-class SourceFile < ActiveRecord::Base
+class SourceFile < ApplicationRecord
   include Rails.application.routes.url_helpers
 
-  validates_presence_of :file_name, :file_content_type, :file_size, :key, :bucket
+  validates :file_name, :file_content_type, :file_size, :key, :bucket, presence: true
 
   delegate :secrets, to: "Rails.application".to_sym
 
@@ -23,8 +23,16 @@ class SourceFile < ActiveRecord::Base
   def pull_down_s3_object_attributes
     Rails.logger.debug "Trying to validate S3 object."
     self.file_name = key.split("/").last if key
-    self.file_size ||= s3_object.content_length rescue nil
-    self.file_content_type ||= s3_object.content_type rescue nil
+    self.file_size ||= begin
+      s3_object.content_length
+    rescue StandardError
+      nil
+    end
+    self.file_content_type ||= begin
+      s3_object.content_type
+    rescue StandardError
+      nil
+    end
     false
   end
 
@@ -33,7 +41,7 @@ def full_url
     if ENV["amazon_bucket_url"]
       "https://#{ENV['amazon_bucket_url']}/#{key}"
     else # we have to build the url up from amazon information
-      "https://#{ENV['amazon_bucket']}.#{AmazonCredentials.build_s3_host_name}/#{key}"
+      "https://#{ENV['amazon_bucket']}.s3-#{Rails.application.secrets.amazon_region}.amazonaws.com/#{key}"
     end
   end
 
@@ -43,7 +51,7 @@ def to_jq_upload
       "name" => file_name,
       "size" => file_size,
       "full_url" => full_url,
-      "image" => self.is_image?,
+      "image" => is_image?,
       "delete_url" => Rails.application.routes.url_helpers.admin_source_file_path(self, format: :json)
     }
   end
diff --git a/app/models/subscription.rb b/app/models/subscription.rb
index 81cf3cbf4..36322681b 100644
--- a/app/models/subscription.rb
+++ b/app/models/subscription.rb
@@ -1,4 +1,4 @@
-class Subscription < ActiveRecord::Base
+class Subscription < ApplicationRecord
   belongs_to :partner, counter_cache: true
   validates :email, presence: true, email: true
   validates :email, uniqueness: { scope: :partner_id }
diff --git a/app/models/topic.rb b/app/models/topic.rb
index 3e69c04c2..667c86dd5 100644
--- a/app/models/topic.rb
+++ b/app/models/topic.rb
@@ -1,3 +1,3 @@
-class Topic < ActiveRecord::Base
+class Topic < ApplicationRecord
   belongs_to :topic_set
 end
diff --git a/app/models/topic_category.rb b/app/models/topic_category.rb
index fd08268bc..a6c8aff5b 100644
--- a/app/models/topic_category.rb
+++ b/app/models/topic_category.rb
@@ -1,19 +1,17 @@
-class TopicCategory < ActiveRecord::Base
+class TopicCategory < ApplicationRecord
   has_many :topic_sets, dependent: :destroy
   has_many :email_campaigns
   has_many :congress_message_campaigns
 
   def as_2d_array
-    arr = []
-    topic_sets.order(:tier).each do |ts|
-      arr.push ts.topics.map { |t| t.name }
+    arr = topic_sets.order(:tier).map do |ts|
+      ts.topics.map(&:name)
     end
-    arr
   end
 
   def best_match(options)
     topics = topic_sets.order(:tier).reduce([]) do |arr, ts|
-      arr += ts.topics
+      arr + ts.topics
     end
 
     topics.each do |topic|
diff --git a/app/models/topic_set.rb b/app/models/topic_set.rb
index 916375ee2..ecda608f8 100644
--- a/app/models/topic_set.rb
+++ b/app/models/topic_set.rb
@@ -1,4 +1,4 @@
-class TopicSet < ActiveRecord::Base
+class TopicSet < ApplicationRecord
   belongs_to :topic_category
   has_many :topics, dependent: :destroy
 end
diff --git a/app/models/tweet.rb b/app/models/tweet.rb
index ae5d52be7..f94782e25 100644
--- a/app/models/tweet.rb
+++ b/app/models/tweet.rb
@@ -1,9 +1,9 @@
-class Tweet < ActiveRecord::Base
+class Tweet < ApplicationRecord
   has_one :action_page
   has_many :tweet_targets
   alias :targets :tweet_targets
   accepts_nested_attributes_for :tweet_targets, reject_if: :all_blank,
-    allow_destroy: true
+                                                allow_destroy: true
 
   def target_congress?
     target_house? || target_senate?
diff --git a/app/models/tweet_target.rb b/app/models/tweet_target.rb
index 57b154db4..bdb5d43bc 100644
--- a/app/models/tweet_target.rb
+++ b/app/models/tweet_target.rb
@@ -1,34 +1,7 @@
-class TweetTarget < ActiveRecord::Base
-  extend AmazonCredentials
-  require "open-uri"
-
+class TweetTarget < ApplicationRecord
   belongs_to :tweet
-  has_attached_file :image, amazon_credentials
-  validates_media_type_spoof_detection :image, if: ->() { image_file_name.present? }
-  do_not_validate_attachment_file_type :image
-  after_save :attach_twitter_image
 
   def url
-    "https://twitter.com/" + twitter_id
-  end
-
-  def image_url
-    image.url
-  end
-
-  def attach_twitter_image
-    self.delay.attach_twitter_image_without_delay if image_file_name.nil? and Twitter.has_api_keys?
-  end
-
-  def attach_twitter_image_without_delay
-    access_token = Twitter.prepare_access_token Rails.application.secrets.twitter_oauth_token, Rails.application.secrets.twitter_oauth_token_secret
-
-    # ref: https://dev.twitter.com/overview/general/user-profile-images-and-banners
-    response = access_token.request(:get, "https://api.twitter.com/1.1/users/show.json?screen_name=" + twitter_id)
-    user_info = JSON.parse response.body
-    user_image_url = user_info["profile_image_url_https"].gsub(/_normal\./, "_bigger.")
-
-    self.image = URI.parse(user_image_url)
-    self.save
+    "https://twitter.com/#{twitter_id}"
   end
 end
diff --git a/app/models/twitter.rb b/app/models/twitter.rb
index 117123ec9..0ea83eaac 100644
--- a/app/models/twitter.rb
+++ b/app/models/twitter.rb
@@ -1,21 +1,22 @@
 class Twitter
   def self.has_api_keys?
-    !Rails.application.secrets.twitter_api_key.blank? &&
-      !Rails.application.secrets.twitter_api_secret.blank? &&
-      !Rails.application.secrets.twitter_oauth_token.blank? &&
-      !Rails.application.secrets.twitter_oauth_token_secret.blank?
+    Rails.application.secrets.twitter_api_key.present? &&
+      Rails.application.secrets.twitter_api_secret.present? &&
+      Rails.application.secrets.twitter_oauth_token.present? &&
+      Rails.application.secrets.twitter_oauth_token_secret.present?
   end
 
   # ref: https://dev.twitter.com/oauth/overview/single-user
   def self.prepare_access_token(oauth_token, oauth_token_secret)
     consumer = OAuth::Consumer.new(
-        Rails.application.secrets.twitter_api_key,
-        Rails.application.secrets.twitter_api_secret,
-        { site: "https://api.twitter.com", scheme: :header })
+      Rails.application.secrets.twitter_api_key,
+      Rails.application.secrets.twitter_api_secret,
+      { site: "https://api.twitter.com", scheme: :header }
+    )
 
     # now create the access token object from passed values
     token_hash = { oauth_token: oauth_token,
                    oauth_token_secret: oauth_token_secret }
-    access_token = OAuth::AccessToken.from_hash(consumer, token_hash)
+    OAuth::AccessToken.from_hash(consumer, token_hash)
   end
 end
diff --git a/app/models/user.rb b/app/models/user.rb
index 526b66a5c..0a11d5889 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -1,9 +1,9 @@
 require "civicrm"
-class User < ActiveRecord::Base
-  include CiviCRM::UserMethods
+class User < ApplicationRecord
+  include Civicrm::UserMethods
 
-  include PgSearch
-  pg_search_scope :search, against: [:email, :first_name, :last_name]
+  include PgSearch::Model
+  pg_search_scope :search, against: %i[email first_name last_name]
 
   # Include default devise modules. Others available are:
   # :confirmable, :lockable, :timeoutable and :omniauthable
@@ -12,7 +12,7 @@ class User < ActiveRecord::Base
          remember_for: 90.days
   has_many :signatures
   has_many :user_preferences
-  has_many :events, class_name: Ahoy::Event
+  has_many :events, class_name: "Ahoy::Event"
   belongs_to :partner
   validates :email, email: true
   validate :password_complexity
@@ -25,7 +25,7 @@ class User < ActiveRecord::Base
 
   alias :preferences :user_preferences
 
-  scope :authors, ->() { joins(:action_pages).distinct }
+  scope :authors, -> { joins(:action_pages).distinct }
 
   def self.group_created_in_range(start_date, end_date)
     if start_date == end_date
@@ -42,11 +42,13 @@ def invalidate_password_reset_tokens
   end
 
   def email_taken?
-    errors.added? :email, :taken
+    return false unless errors.include? :email
+
+    errors.details[:email].any? { |x| x.value?(:taken) }
   end
 
   def send_email_taken_notice
-    if self.confirmed?
+    if confirmed?
       UserMailer.signup_attempt_with_existing_email(self).deliver_now
     else
       send_confirmation_instructions
@@ -54,9 +56,7 @@ def send_email_taken_notice
   end
 
   def password_complexity
-    if admin? && password.present? and password.length < 30
-      errors.add :password, "must be at least 30 (try choosing 6 memorable words)"
-    end
+    errors.add :password, "must be at least 30 (try choosing 6 memorable words)" if admin? && password.present? && (password.length < 30)
   end
 
   def name
@@ -64,21 +64,9 @@ def name
   end
 
   def display_name
-    return name unless name.blank?
-    email
-  end
-
-  def percentile_rank
-    user_action_counts = Rails.cache.fetch("user_action_counts", expires_in: 24.hours) {
-      User.select("users.id, count(ahoy_events.id) AS events_count")
-        .joins("LEFT OUTER JOIN ahoy_events ON ahoy_events.user_id = users.id")
-        .where("ahoy_events.name IS null OR ahoy_events.name = ?", "Action")
-        .group("users.id")
-        .map { |u| u.events_count }
-    }
+    return name if name.present?
 
-    user_count = events.actions.count
-    percentile = user_action_counts.percentile_rank(user_count - 1).round(0)
+    email
   end
 
   def signed?(petition)
@@ -124,19 +112,25 @@ def privileged_role?
 
   # This is here for collission avoidance when generating new user names in tests
   def self.next_id
-    self.last.nil? ? 1 : self.last.id + 1
+    last.nil? ? 1 : last.id + 1
   end
 
   # We're allowing unconfirmed users to reset their passwords by
   # re-registering. In that case, they shouldn't get a password reset
   # notification.
   def send_password_change_notification?
-    self.confirmed? && super
+    confirmed? && super
+  end
+
+  def can_view_archived?(action_page)
+    return true if admin?
+
+    taken_action? action_page
   end
 
   protected
 
   def after_confirmation
-    subscribe!(opt_in = true) if self.subscribe?
+    subscribe!(opt_in: true) if subscribe?
   end
 end
diff --git a/app/models/user_preference.rb b/app/models/user_preference.rb
index 9e7860cb4..200d8ccf9 100644
--- a/app/models/user_preference.rb
+++ b/app/models/user_preference.rb
@@ -1,5 +1,5 @@
-class UserPreference < ActiveRecord::Base
+class UserPreference < ApplicationRecord
   belongs_to :user
-  validates_presence_of :name
-  validates_presence_of :value
+  validates :name, presence: true
+  validates :value, presence: true
 end
diff --git a/app/models/visit.rb b/app/models/visit.rb
index 6bb47fed0..9bcf891d7 100644
--- a/app/models/visit.rb
+++ b/app/models/visit.rb
@@ -1,4 +1,4 @@
-class Visit < ActiveRecord::Base
+class Visit < ApplicationRecord
   has_many :ahoy_events, class_name: "Ahoy::Event"
   belongs_to :user
 end
diff --git a/app/queries/action_page_filters.rb b/app/queries/action_page_filters.rb
index 98d379cd9..d0ba042d3 100644
--- a/app/queries/action_page_filters.rb
+++ b/app/queries/action_page_filters.rb
@@ -14,6 +14,7 @@ def run
 
     filters.each do |f, val|
       next unless valid_query?(f, val)
+
       @relation = if NAMED_SCOPES.include? f
                     relation.send(f, val)
                   else
@@ -25,8 +26,8 @@ def run
 
   private
 
-  NAMED_SCOPES = %i(type status).freeze
-  VALID_FILTERS = %i(type status author category).freeze
+  NAMED_SCOPES = %i[type status].freeze
+  VALID_FILTERS = %i[type status author category].freeze
 
   attr_accessor :relation, :filters
 
@@ -35,7 +36,8 @@ def empty_value?(val)
   end
 
   def process_date_range
-    return unless filters[:date_range].present?
+    return if filters[:date_range].blank?
+
     start_date, end_date = parse_date_range
     @relation = relation.where(created_at: start_date..(end_date + 1.day))
   end
@@ -50,8 +52,6 @@ def valid_query?(f, val)
   end
 
   def validate_filter_name(f)
-    unless VALID_FILTERS.include? f
-      raise ArgumentError, "unrecognized filter #{f}"
-    end
+    raise ArgumentError, "unrecognized filter #{f}" unless VALID_FILTERS.include? f
   end
 end
diff --git a/app/queries/top_institutions_query.rb b/app/queries/top_institutions_query.rb
new file mode 100644
index 000000000..10215ec51
--- /dev/null
+++ b/app/queries/top_institutions_query.rb
@@ -0,0 +1,34 @@
+class TopInstitutionsQuery
+  def self.run(**args)
+    new(**args).run
+  end
+
+  def initialize(action_page:, limit: 300, exclude: [])
+    @action_page = action_page
+    @limit = limit
+    @exclusions = exclude.compact.map(&:id)
+  end
+
+  def run
+    action_page.institutions
+               .where.not(id: exclusions)
+               .left_outer_joins(affiliations: [:signature])
+               .distinct
+               # TODO: break up / document
+               .select("institutions.*, COUNT(signatures.id) AS sig_count")
+               .group("institutions.id")
+               .order("sig_count DESC", "institutions.name")
+               .limit(limit)
+  end
+
+  private
+
+  attr_reader :action_page, :limit, :exclusions
+
+  def source_collection
+    @source_collection ||= action_page.institutions
+    return @source_collection if exclusions.empty?
+
+    @source_collection = @source_collection.where.not(id: exclusions)
+  end
+end
diff --git a/app/uploaders/action_page_image_uploader.rb b/app/uploaders/action_page_image_uploader.rb
new file mode 100644
index 000000000..43a5ffa3d
--- /dev/null
+++ b/app/uploaders/action_page_image_uploader.rb
@@ -0,0 +1,27 @@
+class ActionPageImageUploader < CarrierWave::Uploader::Base
+  storage :fog
+  # cache_storage :file
+
+  def default_url(*args)
+    "missing.png"
+  end
+
+  def store_dir
+    "#{model.class.to_s.pluralize.underscore}/#{mounted_as.to_s.pluralize}/#{id_partition}/#{style}"
+  end
+
+  # we could set this here or config/initializers/carrier_wave.rb
+  def asset_host
+    Rails.application.secrets.amazon_bucket_url.present? ? "https://#{Rails.application.secrets.amazon_bucket_url}" : super
+  end
+
+  private
+
+  def style
+    version_name || "original"
+  end
+
+  def id_partition # mimics paperclips mapping function
+    ("%09d" % model.id).scan(/\d{3}/).join("/")
+  end
+end
diff --git a/app/validators/email_validator.rb b/app/validators/email_validator.rb
index 676a65476..874cce619 100644
--- a/app/validators/email_validator.rb
+++ b/app/validators/email_validator.rb
@@ -1,7 +1,5 @@
 class EmailValidator < ActiveModel::EachValidator
   def validate_each(record, attribute, value)
-    unless value =~ /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i
-      record.errors[attribute] << (options[:message] || "is not an email")
-    end
+    record.errors[attribute] << (options[:message] || "is not an email") unless /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i.match?(value)
   end
 end
diff --git a/app/views/action_page/_meta_tags.html.erb b/app/views/action_page/_meta_tags.html.erb
index 382706cc6..5136ff61d 100644
--- a/app/views/action_page/_meta_tags.html.erb
+++ b/app/views/action_page/_meta_tags.html.erb
@@ -1,7 +1,7 @@
 <% summary = strip_tags stripdown(@actionPage.summary) -%>
 <%
-    image_url = if @actionPage.image.try(:exists?)
-                  image_url(@actionPage.image.to_s)
+    image_url = if @actionPage.image.present?
+                  image_url(@actionPage.image.url)
                 else
                   image_url("og-image-default.png")
                 end
diff --git a/app/views/action_page/_partner_logos.html.erb b/app/views/action_page/_partner_logos.html.erb
deleted file mode 100644
index 27b862cff..000000000
--- a/app/views/action_page/_partner_logos.html.erb
+++ /dev/null
@@ -1,9 +0,0 @@
-<% if @actionPage.partners.present? && @actionPage.partners.any? { |p| p.logo.present? } %>
-  <h2 class="partners-title">Who We Are</h2>
-  <div class="partner-logos">
-  <%= image_tag "EFF_Monogram-red" %>
-    <% @actionPage.partners.each do |partner| %>
-      <%= image_tag partner.logo if partner.logo.present? %>
-    <% end %>
-  </div>
-<% end %>
diff --git a/app/views/action_page/_state_reps.html.erb b/app/views/action_page/_state_reps.html.erb
new file mode 100644
index 000000000..58740e8d3
--- /dev/null
+++ b/app/views/action_page/_state_reps.html.erb
@@ -0,0 +1,17 @@
+<div class="state-rep-names-and-emails">
+  <%= "This action is for the #{legislative_level_from_state_representative_info(@email_campaign.leg_level)}." %>
+  <% @state_reps.each do |sr| %>
+    <div>
+      <%= "Your representative is #{sr['name']}" %>.
+      <% if sr["emails"].present? %>
+        <%= "They can be reached at: #{sr['emails'].join(', ')}" %>
+      <% else %>
+        <%= "We could not find their email address." %>
+      <% end %>
+    </div>
+  <% end %>
+</div>
+
+<div class="state-rep-email">
+  <%= render 'tools/send_email' %>
+</div>
diff --git a/app/views/action_page/index.atom.builder b/app/views/action_page/index.atom.builder
index cf969cdc4..6b300b7ae 100644
--- a/app/views/action_page/index.atom.builder
+++ b/app/views/action_page/index.atom.builder
@@ -1,19 +1,22 @@
 atom_feed do |feed|
-  feed.title(t :site_title)
-  feed.subtitle(t :summary)
-  feed.updated(@actionPages[0].created_at) if @actionPages.length > 0
+  feed.title(t(:site_title))
+  feed.subtitle(t(:summary))
+  feed.updated(@actionPages[0].created_at) unless @actionPages.empty?
 
   @actionPages.each do |actionPage|
     feed.entry(actionPage) do |entry|
-      entry.link(rel: "enclosure", type: actionPage.featured_image.content_type || "image/png",
-                 href: URI.join(root_url, image_path(actionPage.featured_image)))
+      entry.link(
+        rel: "enclosure",
+        type: (actionPage.featured_image.content_type.presence || "image/png"),
+        href: URI.join(root_url, image_path(actionPage.featured_image.url))
+      )
 
       entry.title(actionPage.title)
       entry.summary(markdown(actionPage.summary), type: "html")
       entry.content(markdown(actionPage.description), type: "html")
 
       entry.author do |author|
-        author.name(t :organization_name)
+        author.name(t(:organization_name))
       end
     end
   end
diff --git a/app/views/action_page/index.html.erb b/app/views/action_page/index.html.erb
index ecfd70701..321061b8d 100644
--- a/app/views/action_page/index.html.erb
+++ b/app/views/action_page/index.html.erb
@@ -7,7 +7,7 @@
 <section class="more-actions">
   <%= form_tag action_page_index_path, method: :get, id: "action-page-filter" do %>
     <%= select_tag :category,
-      options_from_collection_for_select(Category.all.order(:title).uniq,
+      options_from_collection_for_select(Category.all.order(:title).distinct,
                                          :title, :title, params[:category]),
       include_blank: "All campaigns" %>
   <% end %>
@@ -18,7 +18,7 @@
             <div>
               <%= link_to action_page_path(actionPage) do%>
                 <div class="image">
-                  <%= image_tag(actionPage.featured_image) %>
+                  <%= image_tag(actionPage.featured_image.url) %>
                 </div>
               <% end %>
 
diff --git a/app/views/action_page/index.json.jbuilder b/app/views/action_page/index.json.jbuilder
index 761f1f25b..db98d0fbc 100644
--- a/app/views/action_page/index.json.jbuilder
+++ b/app/views/action_page/index.json.jbuilder
@@ -4,7 +4,7 @@ json.array! @actionPages do |actionPage|
   json.summary markdown actionPage.summary
   if actionPage.featured_image_file_name
     json.featured_image do
-      json.alt image_alt actionPage.featured_image_file_name
+      json.alt actionPage.featured_image_file_name.titleize
       json.url image_url actionPage.featured_image
     end
   end
diff --git a/app/views/action_page/show.html.erb b/app/views/action_page/show.html.erb
index c025665bd..52fdca997 100644
--- a/app/views/action_page/show.html.erb
+++ b/app/views/action_page/show.html.erb
@@ -10,11 +10,9 @@
           <h5 class="category"><%= @actionPage.category.title -%></h5>
         <% end %>
         <h1><%= @actionPage.title -%></h1>
-        <%= image_tag(@actionPage.featured_image) %>
+        <%= image_tag(@actionPage.featured_image.url) %>
         <%= markdown @actionPage.summary -%>
 
-        <%= render "action_page/partner_logos" %>
-
         <% if @actionPage.enable_petition? && @petition && @petition.description.present? && !@actionPage.description.include?('``` letter') -%>
           <%= render(partial: "action_page/letter", layout: false) %>
         <% end -%>
diff --git a/app/views/admin/action_pages/_email_fields.html.erb b/app/views/admin/action_pages/_email_fields.html.erb
index e8ee74353..0a0c98ab7 100644
--- a/app/views/admin/action_pages/_email_fields.html.erb
+++ b/app/views/admin/action_pages/_email_fields.html.erb
@@ -1,8 +1,4 @@
 <%= f.fields_for(:email_campaign) do |sf| %>
-  <div class="form-item">
-    <%= sf.label :email_addresses, "To" %>
-    <%= sf.text_field :email_addresses %>
-  </div>
 
   <div class="form-item">
     <%= sf.label :subject %>
@@ -13,4 +9,36 @@
     <%= sf.label :message %>
     <%= sf.text_area :message %>
   </div>
+
+  <fieldset class="form-item">
+    <legend>Select State-Level Legislators</legend>
+
+    <%= sf.label :state, class: "fancy" do %>
+      <%= sf.select :state, options_for_select(EmailCampaign::STATES, @actionPage.email_campaign.state), include_blank: "- none -" %><span class="ui"></span>
+    <% end %>
+
+    <div id="state-level-target-selection">
+      <p>For now, please choose only one.</p>
+      <%= sf.label :target_state_lower_chamber do %>
+        <%= sf.check_box :target_state_lower_chamber, class: "fancy" %><span class="ui"></span>
+        Lower Chamber
+      <% end %>
+
+      <%= sf.label :target_state_upper_chamber do %>
+        <%= sf.check_box :target_state_upper_chamber, class: "fancy" %><span class="ui"></span>
+        Upper Chamber
+      <% end %>
+
+      <%= sf.label :target_governor do %>
+        <%= sf.check_box :target_governor, class: "fancy" %><span class="ui"></span>
+        Governor
+      <% end %>
+    </div>
+
+    <br></br>
+
+    <%= sf.label :email_addresses, "Or enter custom email addresses below:" %>
+    <%= sf.text_field :email_addresses %>
+  </fieldset>
+
 <% end %>
diff --git a/app/views/admin/action_pages/_gallery.html.erb b/app/views/admin/action_pages/_gallery.html.erb
index 1f315d914..5022f32d7 100644
--- a/app/views/admin/action_pages/_gallery.html.erb
+++ b/app/views/admin/action_pages/_gallery.html.erb
@@ -1,10 +1,12 @@
 <div class="gallery">
   <% if defined?(f) %>
+  <!-- todo: remove? -->
     <%= f.send :hidden_field, field, value: nil %>
+    <%= f.send :hidden_field, "remote_#{field}_url", value: nil %>
 
     <% if current_value = f.object.send(field).presence %>
       <figure class="current">
-        <%= image_tag current_value, class: "original" %>
+        <%= image_tag current_value.url, class: "original" %>
 
         <span class="change">
           &rarr; <img />
diff --git a/app/views/admin/action_pages/edit_partners.html.erb b/app/views/admin/action_pages/edit_partners.html.erb
index f2a9aa4a2..78d2e7483 100644
--- a/app/views/admin/action_pages/edit_partners.html.erb
+++ b/app/views/admin/action_pages/edit_partners.html.erb
@@ -2,7 +2,7 @@
 
 <h2>Partners for <%= @actionPage.title %></h2>
 
-<p> Add partner logos and email signups to this action. </p>
+<p> Add partners email signups to this action. </p>
 
 <%= form_for([:admin, @actionPage]) do |f| %>
   <div class="form-item">
diff --git a/app/views/admin/partners/_form.html.erb b/app/views/admin/partners/_form.html.erb
index 52ffc2e9c..574e40796 100644
--- a/app/views/admin/partners/_form.html.erb
+++ b/app/views/admin/partners/_form.html.erb
@@ -26,11 +26,6 @@
     <%= f.text_field :code  -%>
   </div>
 
-  <div class="form-item">
-    <%= f.label :logo, "Logo" -%>
-    <%= f.file_field :logo  -%>
-  </div>
-
   <div class="form-actions">
     <%= f.submit "Save", class: "btn btn-primary" %>
   </div>
diff --git a/app/views/admin/partners/index.html.erb b/app/views/admin/partners/index.html.erb
index 953257e60..19e053612 100644
--- a/app/views/admin/partners/index.html.erb
+++ b/app/views/admin/partners/index.html.erb
@@ -2,7 +2,7 @@
 
 <h2>Partners</h2>
 
-<p>If we are running a joint campaign, we’ll want to include the partner organization’s name and logo on the action. Adding a partner here puts the name and logo into our database so that they can be added to an action from a list. </p>
+<p>If we are running a joint campaign, we’ll want to include the partner organization’s name on the action. Adding a partner here puts the name into our database so that they can be added to an action from a list. </p>
 
 <h3>Partner signups</h3>
 
diff --git a/app/views/tools/_email.html.erb b/app/views/tools/_email.html.erb
index 3b797d08e..8db628e27 100644
--- a/app/views/tools/_email.html.erb
+++ b/app/views/tools/_email.html.erb
@@ -1,4 +1,11 @@
-<div id='email-tool' class="tool">
+<% if @email_campaign.state? %>
+  <div class="page-indicator">
+    <div class="page1 active">1</div>
+    <div class="page2">2</div>
+    <div class="page3">3</div>
+  </div>
+<% end %>
+<div id='email-tool' class="tool" data-action-id="<%= @actionPage.id %>">
   <div class="tool-container">
     <div class="tool-heading">
       <h2 class="tool-title">Take action</h2>
@@ -7,66 +14,20 @@
       <% end %>
     </div>
 
-    <div class="tool-body" id="target-email">
-      <h3>Send this email:</h3>
-
-      <fieldset disabled>
-        <textarea class="form-control" rows="14"><%= @email_campaign.message %></textarea>
-      </fieldset>
-      <%= form_tag '/tools/email', method: 'post', target: '_blank' do |f| -%>
-        <input type="hidden" name="action_id" value="<%= @actionPage.id %>" />
-        <input type="hidden" name="dnt" value="false" />
-        <%= invisible_captcha %>
-
-        <%= render "/tools/newsletter_signup", email: true, location: true, privacy_notice: true %>
-
-        <%= button_tag type: 'submit',
-                       name: 'service',
-                       value: 'default',
-                       class: 'eff-button' do -%>
-          Use default mail client
-        <% end %>
-        <p class="small">Or send using:</p>
-
-        <%= button_tag type: 'submit',
-                       name: 'service',
-                       value: 'gmail',
-                       class: 'eff-button' do -%>
-          <i class="icon-google"></i> Gmail
-        <% end %>
-
-        <%= button_tag type: 'submit',
-                       name: 'service',
-                       value: 'hotmail',
-                       class: 'eff-button' do -%>
-          <i class="icon-windows"></i> Outlook
-        <% end %>
-        <br>
-
-        <%= button_tag type: 'submit',
-                       name: 'service',
-                       value: 'copy',
-                       data: {
-                         :'clipboard-target' => 'email_target_text',
-                         :placement => 'bottom',
-                         :toggle => 'tooltip',
-                         :title => 'Copied!',
-                         :trigger => 'click',
-                       },
-                       id: 'copy-email-action',
-                       class: 'eff-button' do -%>
-          <i class="icon-copy"></i> Copy to Clipboard
-        <% end %>
-
-        <div id='email_target_text'><%= render 'tools/email_target_text' %></div>
+    <div class="email-body">
+      <% if @email_campaign.state? %>
+        <%= render 'tools/lookup_state_rep' %>
+      <% else %>
+        <%= render 'tools/send_email' %>
       <% end %>
     </div>
   </div>
 </div>
 
-<div class="update-user-data-container" style="display: none;">
-  <% if current_user %>
-    <input checked="checked" id="update_user_data" name="update_user_data" type="checkbox" value="yes">
-    <label for="update_user_data", value="Save my name and address for next time."></label>
-  <% end %>
+  <div class="update-user-data-container" style="display: none;">
+    <% if current_user %>
+      <input checked="checked" id="update_user_data" name="update_user_data" type="checkbox" value="yes">
+      <label for="update_user_data" value="Save my name and address for next time."></label>
+    <% end %>
+  </div>
 </div>
diff --git a/app/views/tools/_lookup_state_rep.html.erb b/app/views/tools/_lookup_state_rep.html.erb
new file mode 100644
index 000000000..a9fc61d4c
--- /dev/null
+++ b/app/views/tools/_lookup_state_rep.html.erb
@@ -0,0 +1,43 @@
+<div class="state-rep-lookup">
+  <p>Enter your address below and we'll help you email your representatives (US addresses only).</p>
+  <div class="address-lookup">
+    <%= form_tag(tools_state_reps_path, method: :get, remote: true, class: "form state-rep-lookup") do %>
+      <%= hidden_field_tag :email_campaign_id, @actionPage.email_campaign.id %>
+
+      <fieldset id="lookup-address">
+        <h3>
+          <span class="customize-message-popover" data-toggle="tooltip" data-trigger="hover">?
+            <span class="tooltiptext">We'll use your address to find your state representatives.</span>
+          </span>
+          Look up your state representatives
+        </h3>
+        <div id="errors"></div>
+
+        <div class="form-group">
+          <%= text_field_tag :street_address, (current_user && current_user.street_address),
+            placeholder: "Street Address", "aria-label": "Street Address",
+            required: true, class: "form-control" %>
+        </div>
+
+        <div class="form-group">
+          <%= text_field_tag :zipcode, (current_user && current_user.zipcode),
+            placeholder: "Zip Code", "aria-label": "Zip Code", required: true,
+            class: "form-control", title: "Must be 5 numeric numbers",
+            pattern: "\\d{5}", maxlength: 5 %>
+        </div>
+
+        <div class="form-errors info-circle error hidden"></div>
+
+        <p class="privacy-notice">Uses <a href="https://developers.google.com/terms/api-services-user-data-policy" target="_blank">Google</a>'s APIs (
+        <span class="privacy-notice-popover" data-toggle="tooltip" data-trigger="hover">why?
+          <!-- Attribution Guidelines: https://developers.google.com/civic-information/docs/data_guidelines?hl=en#data-availability -->
+          <span class="tooltiptext">Representative information powered by the Civic Information API.</span>
+        </span>).
+        </p>
+      </fieldset>
+      <button type="submit" class="eff-button" id="button-state-rep-lookup"role="button" aria-pressed="false">See Your Representatives</button>
+      <%= render "tools/loading" -%>
+  </div>
+<% end %>
+</div>
+<div class="state-reps"></div>
diff --git a/app/views/tools/_send_email.html.erb b/app/views/tools/_send_email.html.erb
new file mode 100644
index 000000000..14b21daed
--- /dev/null
+++ b/app/views/tools/_send_email.html.erb
@@ -0,0 +1,57 @@
+<div class="tool-body" id="target-email">
+   <h3>Send this email:</h3>
+
+   <fieldset disabled>
+      <textarea class="form-control" rows="14"><%= @email_campaign.message %></textarea>
+   </fieldset>
+   <%= form_tag '/tools/email', method: 'post', target: '_blank' do |f| -%>
+      <input type="hidden" name="action_id" value="<%= @actionPage.id %>" />
+      <% if @state_reps %>
+         <input type="hidden" name="state_rep_email" value="<%= @state_rep_email %>" />
+      <% end %>
+      <input type="hidden" name="dnt" value="false" />
+      <%= invisible_captcha %>
+
+      <%= render "/tools/newsletter_signup", email: true, location: true, privacy_notice: true %>
+
+      <%= button_tag type: 'submit',
+                     name: 'service',
+                     value: 'default',
+                     class: 'eff-button' do -%>
+        Use default mail client
+      <% end %>
+      <p class="small">Or send using:</p>
+
+      <%= button_tag type: 'submit',
+                     name: 'service',
+                     value: 'gmail',
+                     class: 'eff-button' do -%>
+        <i class="icon-google"></i> Gmail
+      <% end %>
+
+      <%= button_tag type: 'submit',
+                     name: 'service',
+                     value: 'hotmail',
+                     class: 'eff-button' do -%>
+        <i class="icon-windows"></i> Outlook
+      <% end %>
+      <br>
+
+      <%= button_tag type: 'submit',
+                     name: 'service',
+                     value: 'copy',
+                     data: {
+                       :'clipboard-target' => 'email_target_text',
+                       :placement => 'bottom',
+                       :toggle => 'tooltip',
+                       :title => 'Copied!',
+                       :trigger => 'click',
+                     },
+                     id: 'copy-email-action',
+                     class: 'eff-button' do -%>
+        <i class="icon-copy"></i> Copy to Clipboard
+      <% end %>
+
+      <div id='email_target_text'><%= render 'tools/email_target_text' %></div>
+   <% end %>
+</div>
\ No newline at end of file
diff --git a/app/views/tools/_tweet.html.erb b/app/views/tools/_tweet.html.erb
index 00a498ac6..e02c28027 100644
--- a/app/views/tools/_tweet.html.erb
+++ b/app/views/tools/_tweet.html.erb
@@ -15,9 +15,6 @@
           <% initial_targets = @tweet.targets.sample(3) %>
           <% @tweet.targets.each do |target| %>
             <div class="tweet-individual"<%= %( style="display: none").html_safe unless initial_targets.include?(target) %>>
-              <% if target.image_url.present? %>
-                <img src="<%= target.image_url %>" class="individual">
-              <% end %>
 
               <%= link_to "https://twitter.com/intent/tweet?" + {
                   text: ".@#{target.twitter_id} #{@tweet.message}",
diff --git a/app/views/users/show.html.erb b/app/views/users/show.html.erb
index 8dbecfe5e..47f421023 100644
--- a/app/views/users/show.html.erb
+++ b/app/views/users/show.html.erb
@@ -37,9 +37,6 @@
       <% if current_user.record_activity? %>
         <div class="action-stats">
           <h3>Stats</h3>
-          <div class="percentile">
-            <p>You are in the <span><%= current_user.percentile_rank.ordinalize %> </span>percentile of users.</p>
-          </div>
           <p>Actions you've taken so far:</p>
           <div class="action-grid">
             <div class="quad-1">
diff --git a/bin/rails b/bin/rails
index 728cd85aa..efc037749 100755
--- a/bin/rails
+++ b/bin/rails
@@ -1,4 +1,4 @@
 #!/usr/bin/env ruby
-APP_PATH = File.expand_path('../../config/application',  __FILE__)
-require_relative '../config/boot'
-require 'rails/commands'
+APP_PATH = File.expand_path("../config/application", __dir__)
+require_relative "../config/boot"
+require "rails/commands"
diff --git a/bin/rake b/bin/rake
index 17240489f..4fbf10b96 100755
--- a/bin/rake
+++ b/bin/rake
@@ -1,4 +1,4 @@
 #!/usr/bin/env ruby
-require_relative '../config/boot'
-require 'rake'
+require_relative "../config/boot"
+require "rake"
 Rake.application.run
diff --git a/bin/setup b/bin/setup
new file mode 100755
index 000000000..ec47b79b3
--- /dev/null
+++ b/bin/setup
@@ -0,0 +1,33 @@
+#!/usr/bin/env ruby
+require "fileutils"
+
+# path to your application root.
+APP_ROOT = File.expand_path("..", __dir__)
+
+def system!(*args)
+  system(*args) || abort("\n== Command #{args} failed ==")
+end
+
+FileUtils.chdir APP_ROOT do
+  # This script is a way to set up or update your development environment automatically.
+  # This script is idempotent, so that you can run it at any time and get an expectable outcome.
+  # Add necessary setup steps to this file.
+
+  puts "== Installing dependencies =="
+  system! "gem install bundler --conservative"
+  system("bundle check") || system!("bundle install")
+
+  # puts "\n== Copying sample files =="
+  # unless File.exist?("config/database.yml")
+  #   FileUtils.cp "config/database.yml.sample", "config/database.yml"
+  # end
+
+  puts "\n== Preparing database =="
+  system! "bin/rails db:prepare"
+
+  puts "\n== Removing old logs and tempfiles =="
+  system! "bin/rails log:clear tmp:clear"
+
+  puts "\n== Restarting application server =="
+  system! "bin/rails restart"
+end
diff --git a/config.ru b/config.ru
index 193e5fed8..4a3c09a68 100644
--- a/config.ru
+++ b/config.ru
@@ -1,4 +1,6 @@
 # This file is used by Rack-based servers to start the application.
 
-require ::File.expand_path("../config/environment", __FILE__)
+require_relative "config/environment"
+
 run Rails.application
+Rails.application.load_server
diff --git a/config/application.rb b/config/application.rb
index b4a336198..61e2bae90 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -1,31 +1,24 @@
-require File.expand_path("../boot", __FILE__)
+require_relative "boot"
 
 require "rails/all"
 
 # Require the gems listed in Gemfile, including any gems
 # you've limited to :test, :development, or :production.
-Bundler.require(:default, Rails.env)
+Bundler.require(*Rails.groups)
+
+# needed after rails 7 + ruby 3.3
+require "ostruct"
+
 module Actioncenter
   class Application < Rails::Application
-    # Settings in config/environments/* take precedence over those specified here.
-    # Application configuration should go into files in config/initializers
-    # -- all .rb files in that directory are automatically loaded.
+    # Initialize configuration defaults for originally generated Rails version.
+    config.load_defaults 7.0
 
-    # Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
-    # Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.
-    # config.time_zone = 'Central Time (US & Canada)'
 
-    # The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
-    # config.i18n.load_path += Dir[Rails.root.join('my', 'locales', '*.{rb,yml}').to_s]
-    # config.i18n.default_locale = :de
-
-    config.autoload_paths += %W(#{config.root}/lib)
-    config.eager_load_paths += %W(#{config.root}/lib)
     config.assets.paths << Rails.root.join('node_modules')
 
-    #config.logger = ActiveSupport::Logger.new(STDOUT)
     config.to_prepare do
-          Devise::Mailer.layout "email" # email.haml or email.erb
+      Devise::Mailer.layout "email" # email.haml or email.erb
     end
 
     config.exceptions_app = ->(env) { ExceptionsController.action(:show).call(env) }
@@ -43,6 +36,9 @@ class Application < Rails::Application
       from: Rails.application.secrets.mailings_from
     }
 
+    config.active_record.belongs_to_required_by_default = false
+    #  config.active_support.cache_format_version = 7.0
+
     config.cors_allowed_domains = Rails.application.secrets.cors_allowed_domains ? Rails.application.secrets.cors_allowed_domains.split(" ") : []
 
     config.twitter_handle = Rails.application.secrets.twitter_handle
@@ -50,12 +46,8 @@ class Application < Rails::Application
     config.facebook_handle = Rails.application.secrets.facebook_handle
     config.call_tool_url = Rails.application.secrets.call_tool_url
     config.congress_forms_url = Rails.application.secrets.congress_forms_url
+    config.google_civic_api_url = Rails.application.secrets.google_civic_api_url
     config.time_zone = Rails.application.secrets.time_zone || "Eastern Time (US & Canada)"
-    config.active_record.raise_in_transactional_callbacks = true
 
-    # fix file attachment:
-    # https://github.com/EFForg/action-center-platform/pull/408#issuecomment-381269915
-    # https://stackoverflow.com/questions/49176124/error-no-handler-found-with-base64-for-paperclip-5-2
-    Paperclip::HttpUrlProxyAdapter.register
   end
 end
diff --git a/config/boot.rb b/config/boot.rb
index 359673666..282011619 100644
--- a/config/boot.rb
+++ b/config/boot.rb
@@ -1,4 +1,3 @@
-# Set up gems listed in the Gemfile.
-ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
+ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__)
 
-require 'bundler/setup' if File.exists?(ENV['BUNDLE_GEMFILE'])
+require "bundler/setup" # Set up gems listed in the Gemfile.
diff --git a/config/cable.yml b/config/cable.yml
new file mode 100644
index 000000000..9f7a55eb5
--- /dev/null
+++ b/config/cable.yml
@@ -0,0 +1,10 @@
+development:
+  adapter: async
+
+test:
+  adapter: test
+
+production:
+  adapter: redis
+  url: <%= ENV.fetch("REDIS_URL") { "redis://localhost:6379/1" } %>
+  channel_prefix: actioncenter_production
diff --git a/config/database.yml b/config/database.yml
index 18f4597d5..754b64a72 100644
--- a/config/database.yml
+++ b/config/database.yml
@@ -15,6 +15,7 @@ development:
 
 test: &test
   <<: *common
+  database: <%= "#{Rails.application.secrets.db_database}-test" %>
 
 production:
   <<: *common
diff --git a/config/environment.rb b/config/environment.rb
index daa488909..23258e206 100644
--- a/config/environment.rb
+++ b/config/environment.rb
@@ -1,5 +1,5 @@
 # Load the Rails application.
-require File.expand_path('../application', __FILE__)
+require_relative "application"
 
 # Initialize the Rails application.
 Actioncenter::Application.initialize!
diff --git a/config/environments/development.rb b/config/environments/development.rb
index c5ff734da..9e59223d7 100644
--- a/config/environments/development.rb
+++ b/config/environments/development.rb
@@ -1,42 +1,78 @@
+require "active_support/core_ext/integer/time"
+
 Actioncenter::Application.configure do
   # Settings specified here will take precedence over those in config/application.rb.
 
-  # In the development environment your application's code is reloaded on
-  # every request. This slows down response time but is perfect for development
+  # In the development environment your application's code is reloaded any time
+  # it changes. This slows down response time but is perfect for development
   # since you don't have to restart the web server when you make code changes.
   config.cache_classes = false
 
   # Do not eager load code on boot.
   config.eager_load = false
 
-  # Show full error reports and disable caching.
-  config.consider_all_requests_local       = true
-  config.action_controller.perform_caching = false
+  # Show full error reports.
+  config.consider_all_requests_local = true
+
+  # Enable server timing
+  config.server_timing = true
+
+  # Enable/disable caching. By default caching is disabled.
+  # Run rails dev:cache to toggle caching.
+  if Rails.root.join("tmp/caching-dev.txt").exist?
+    config.action_controller.perform_caching = true
+    config.action_controller.enable_fragment_cache_logging = true
+
+    config.cache_store = :memory_store
+    config.public_file_server.headers = {
+      "Cache-Control" => "public, max-age=#{2.days.to_i}"
+    }
+  else
+    config.action_controller.perform_caching = false
+
+    config.cache_store = :null_store
+  end
+
+  # Store uploaded files on the local file system (see config/storage.yml for options).
+  config.active_storage.service = :local
 
   # Don't care if the mailer can't send.
   config.action_mailer.raise_delivery_errors = true
   config.action_mailer.delivery_method = :smtp
 
-  config.action_mailer.default_url_options = { :host => 'localhost:3000' }
-  config.action_mailer.asset_host = 'http://localhost:3000'
+  config.action_mailer.perform_caching = false
 
   # Print deprecation notices to the Rails logger.
   config.active_support.deprecation = :log
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
   config.force_ssl = Rails.application.secrets.force_ssl.nil? ? false : Rails.application.secrets.force_ssl
+  # Raise exceptions for disallowed deprecations.
+  config.active_support.disallowed_deprecation = :raise
 
+  # Tell Active Support which deprecation messages to disallow.
+  config.active_support.disallowed_deprecation_warnings = []
 
-  # Raise an error on page load if there are pending migrations
+  # Raise an error on page load if there are pending migrations.
   config.active_record.migration_error = :page_load
 
-  unless Rails.application.secrets.sentry_dsn.nil?
-    config.action_dispatch.show_exceptions = false
-    config.consider_all_requests_local = false
-  end
+  # Highlight code that triggered database queries in logs.
+  config.active_record.verbose_query_logs = true
 
   # Debug mode disables concatenation and preprocessing of assets.
   # This option may cause significant delays in view rendering with a large
   # number of complex assets.
   config.assets.debug = false
+
+  # Suppress logger output for asset requests.
+  config.assets.quiet = true
+
+  # Raises error for missing translations.
+  # config.i18n.raise_on_missing_translations = true
+
+  # Annotate rendered view with file names.
+  # config.action_view.annotate_rendered_view_with_filenames = true
+
+  # Uncomment if you wish to allow Action Cable access from any origin.
+  # config.action_cable.disable_request_forgery_protection = true
 end
diff --git a/config/environments/production.rb b/config/environments/production.rb
index 450d29783..d1cf07847 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -1,3 +1,5 @@
+require "active_support/core_ext/integer/time"
+
 Actioncenter::Application.configure do
   # Settings specified here will take precedence over those in config/application.rb.
 
@@ -5,7 +7,7 @@
   config.cache_classes = true
 
   # Eager load code on boot. This eager loads most of Rails and
-  # your application in memory, allowing both thread web servers
+  # your application in memory, allowing both threaded web servers
   # and those relying on copy on write to perform better.
   # Rake tasks automatically ignore this option for performance.
   config.eager_load = true
@@ -18,17 +20,16 @@
   config.action_mailer.raise_delivery_errors = true
   config.action_mailer.delivery_method = :smtp
 
-
   config.action_mailer.default_url_options = { :host => Rails.application.secrets.smtp_domain, :protocol => 'https' }
   config.action_mailer.asset_host = "https://#{Rails.application.secrets.smtp_domain}"
 
-  # Enable Rack::Cache to put a simple HTTP cache in front of your application
-  # Add `rack-cache` to your Gemfile before enabling this.
-  # For large-scale production use, consider using a caching reverse proxy like nginx, varnish or squid.
-  # config.action_dispatch.rack_cache = true
+  # Ensures that a master key has been made available in either ENV["RAILS_MASTER_KEY"]
+  # or in config/master.key. This key is used to decrypt credentials (and other encrypted files).
+  # config.require_master_key = true
 
-  # Disable Rails's static asset server (Apache or nginx will already do this).
-  config.serve_static_files = false
+  # Disable serving static files from the `/public` folder by default since
+  # Apache or NGINX already handles this.
+  config.public_file_server.enabled = ENV["RAILS_SERVE_STATIC_FILES"].present?
 
   # Compress JavaScripts and CSS.
   config.assets.js_compressor = Uglifier.new(harmony: true)
@@ -42,56 +43,51 @@
 
   # Version of your assets, change this if you want to expire all your assets.
   config.assets.version = '1.0'
+  # Enable serving of images, stylesheets, and JavaScripts from an asset server.
+  # config.asset_host = "http://assets.example.com"
 
   # Specifies the header that your server uses for sending files.
-  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
-  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
+  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for Apache
+  # config.action_dispatch.x_sendfile_header = "X-Accel-Redirect" # for NGINX
+
+  # Store uploaded files on the local file system (see config/storage.yml for options).
+  config.active_storage.service = :local
+
+  # Mount Action Cable outside main process or domain.
+  # config.action_cable.mount_path = nil
+  # config.action_cable.url = "wss://example.com/cable"
+  # config.action_cable.allowed_request_origins = [ "http://example.com", /http:\/\/example.*/ ]
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
   config.force_ssl = Rails.application.secrets.force_ssl.nil? ? true : Rails.application.secrets.force_ssl
 
-  # Set to :debug to see everything in the log.
+  # Include generic and useful information about system operation, but avoid logging too much
+  # information to avoid inadvertent exposure of personally identifiable information (PII).
   config.log_level = :info
 
   # Prepend all log lines with the following tags.
-  # config.log_tags = [ :subdomain, :uuid ]
+  config.log_tags = [ :request_id ]
 
-  # Use a different logger for distributed setups.
-  # config.logger = ActiveSupport::TaggedLogging.new(SyslogLogger.new)
-  config.logger = Logger.new STDOUT
   # Use a different cache store in production.
   # config.cache_store = :mem_cache_store
 
+  # Use a real queuing backend for Active Job (and separate queues per environment).
+  # config.active_job.queue_adapter     = :resque
+  # config.active_job.queue_name_prefix = "actioncenter_production"
 
-  # Enables GZIP without nginx/apache
-
-  #config.assets.initialize_on_precompile = true
-  # Enable serving of images, stylesheets, and JavaScripts from an asset server.
-  # config.action_controller.asset_host = "http://assets.example.com"
-
-  # Precompile additional assets.
-  # application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
-  # config.assets.precompile += %w( search.js )
-  #config.assets.precompile += %w( welcome.css action_page.css admin/action_page.css )
-  #config.assets.paths << Rails.root.join('app', 'assets', 'fonts')
-  #config.assets.precompile += %w( .svg .eot .woff .ttf )
-
-  # precompile stylesheets loaded by epiceditor iframes on admin pages
   config.assets.precompile += %w( EpicEditor/epiceditor/themes/base/epiceditor.css EpicEditor/epiceditor/themes/preview/github.css EpicEditor/epiceditor/themes/editor/epic-light.css)
+  config.action_mailer.perform_caching = false
 
   # Ignore bad email addresses and do not raise email delivery errors.
   # Set this to true and configure the email server for immediate delivery to raise delivery errors.
   # config.action_mailer.raise_delivery_errors = false
 
   # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
-  # the I18n.default_locale when a translation can not be found).
+  # the I18n.default_locale when a translation cannot be found).
   config.i18n.fallbacks = true
 
-  # Send deprecation notices to registered listeners.
-  config.active_support.deprecation = :notify
-
-  # Disable automatic flushing of the log to improve performance.
-  # config.autoflush_log = false
+  # Don't log any deprecations.
+  config.active_support.report_deprecations = false
 
   # Use default logging formatter so that PID and timestamp are not suppressed.
   config.log_formatter = ::Logger::Formatter.new
@@ -106,4 +102,6 @@
 
   # Rate limiting
   config.middleware.use Rack::Attack
+  # Do not dump schema after migrations.
+  config.active_record.dump_schema_after_migration = false
 end
diff --git a/config/environments/test.rb b/config/environments/test.rb
index c5f1c3ace..6057f3bf3 100644
--- a/config/environments/test.rb
+++ b/config/environments/test.rb
@@ -1,24 +1,26 @@
+require "active_support/core_ext/integer/time"
+
 Actioncenter::Application.configure do
   # Settings specified here will take precedence over those in config/application.rb.
 
-  # The test environment is used exclusively to run your application's
-  # test suite. You never need to work with it otherwise. Remember that
-  # your test database is "scratch space" for the test suite and is wiped
-  # and recreated between test runs. Don't rely on the data there!
+  # Turn false under Spring and add config.action_view.cache_template_loading = true.
   config.cache_classes = true
 
-  # Do not eager load code on boot. This avoids loading your whole application
-  # just for the purpose of running a single test. If you are using a tool that
-  # preloads Rails for running tests, you may have to set it to true.
-  config.eager_load = false
+  # Eager loading loads your whole application. When running a single test locally,
+  # this probably isn't necessary. It's a good idea to do in a continuous integration
+  # system, or in some way before deploying your code.
+  config.eager_load = ENV["CI"].present?
 
-  # Configure static asset server for tests with Cache-Control for performance.
-  config.serve_static_files  = true
-  config.static_cache_control = "public, max-age=3600"
+  # Configure public file server for tests with Cache-Control for performance.
+  config.public_file_server.enabled = true
+  config.public_file_server.headers = {
+    "Cache-Control" => "public, max-age=#{1.hour.to_i}"
+  }
 
   # Show full error reports and disable caching.
   config.consider_all_requests_local       = true
   config.action_controller.perform_caching = false
+  config.cache_store = :null_store
 
   # Raise exceptions instead of rendering exception templates.
   config.action_dispatch.show_exceptions = false
@@ -26,6 +28,11 @@
   # Disable request forgery protection in test environment.
   config.action_controller.allow_forgery_protection = false
 
+  # Store uploaded files on the local file system in a temporary directory.
+  config.active_storage.service = :test
+
+  config.action_mailer.perform_caching = false
+
   # Tell Action Mailer not to deliver emails to the real world.
   # The :test delivery method accumulates sent emails in the
   # ActionMailer::Base.deliveries array.
@@ -35,4 +42,15 @@
   config.active_support.deprecation = :stderr
 
   config.action_mailer.default_url_options = { :host => 'localhost' }
+  # Raise exceptions for disallowed deprecations.
+  config.active_support.disallowed_deprecation = :raise
+
+  # Tell Active Support which deprecation messages to disallow.
+  config.active_support.disallowed_deprecation_warnings = []
+
+  # Raises error for missing translations.
+  # config.i18n.raise_on_missing_translations = true
+
+  # Annotate rendered view with file names.
+  # config.action_view.annotate_rendered_view_with_filenames = true
 end
diff --git a/config/initializers/ahoy.rb b/config/initializers/ahoy.rb
index 1043eb6f5..bef5f6597 100644
--- a/config/initializers/ahoy.rb
+++ b/config/initializers/ahoy.rb
@@ -1,18 +1,51 @@
-class Ahoy::Store < Ahoy::Stores::ActiveRecordStore
+class Ahoy::Store < Ahoy::DatabaseStore
+  # This method is empty to disable linking of users and visits
+  def autheticate(data); end
+
   def user
     current_user = super
-    current_user if current_user.try(:record_activity?)
+    return nil unless current_user.try(:record_activity?)
+    current_user
+  end
+
+  def track_event(data)
+    data[:id] = ensure_uuid(data.delete(:event_id))
+    data[:action_page_id] = data[:properties].delete(:actionPageId)
+    super(data)
+  end
+
+  # Based on https://github.com/ankane/ahoy/blob/ee2d0b3afff6284f57e372926d4a82fc91c8a948/docs/Ahoy-2-Upgrade.md#activerecordstore
+  # TODO: find better uuid? maybe druuid? UUIDTools is what was recommended by
+  # the ahoy upgrade docs but those were very old; probably shouldn't rely on sha1
+  def track_visit(data)
+    data[:id] = ensure_uuid(data.delete(:visit_token))
+    data[:visitor_id] = ensure_uuid(data.delete(:visitor_token))
+    super(data)
   end
 
-  def track_event(name, properties, options)
-    action_page_id = options[:action_page_id] || options[:action_page].try(:id)
-    super do |event|
-      event.action_page_id = action_page_id
-    end
+  def visit
+    @visit ||= visit_model.find_by(id: ensure_uuid(ahoy.visit_token)) if ahoy.visit_token
+  end
+
+  def visit_model
+    Visit
+  end
+
+  UUID_NAMESPACE = UUIDTools::UUID.parse("a82ae811-5011-45ab-a728-569df7499c5f")
+
+  def ensure_uuid(id)
+    UUIDTools::UUID.parse(id).to_s
+  rescue
+    UUIDTools::UUID.sha1_create(UUID_NAMESPACE, id).to_s
   end
 end
 
 module Ahoy
+  # api disables visit tracking for all controllers; seems to mimic the settings
+  # we had before
+  self.api = true
   self.visit_duration = nil
   self.visitor_duration = nil
+  self.mask_ips = true
+  self.cookies = false
 end
diff --git a/config/initializers/assets.rb b/config/initializers/assets.rb
index 5734b4427..c12c4d058 100644
--- a/config/initializers/assets.rb
+++ b/config/initializers/assets.rb
@@ -1,7 +1,16 @@
 Actioncenter::Application.configure do
+  # Version of your assets, change this if you want to expire all your assets.
+  config.assets.version = "1.0"
   config.assets.paths << Rails.root.join("app", "assets", "fonts")
   config.assets.precompile = config.assets.precompile.map!{ |path| path == /(?:\/|\\|\A)application\.(css|js)$/ ? /(?<!jquery-sortable)(?:\/|\\|\A)application\.(css|js)$/ : path }
   config.assets.precompile += %w( admin.css admin.js )
   config.assets.precompile += %w( congress-images-102x125/i/* )
 end
 
+# Add additional assets to the asset load path.
+# Rails.application.config.assets.paths << Emoji.images_path
+
+# Precompile additional assets.
+# application.js, application.css, and all non-JS/CSS in the app/assets
+# folder are already added.
+# Rails.application.config.assets.precompile += %w( admin.js admin.css )
diff --git a/config/initializers/backtrace_silencers.rb b/config/initializers/backtrace_silencers.rb
index 59385cdf3..b67964174 100644
--- a/config/initializers/backtrace_silencers.rb
+++ b/config/initializers/backtrace_silencers.rb
@@ -3,5 +3,6 @@
 # You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
 # Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
 
-# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
-# Rails.backtrace_cleaner.remove_silencers!
+# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code
+# by setting BACKTRACE=1 before calling your invocation, like "BACKTRACE=1 ./bin/rails runner 'MyClass.perform'".
+Rails.backtrace_cleaner.remove_silencers! if ENV["BACKTRACE"]
diff --git a/config/initializers/carrier_wave.rb b/config/initializers/carrier_wave.rb
new file mode 100644
index 000000000..f080311cf
--- /dev/null
+++ b/config/initializers/carrier_wave.rb
@@ -0,0 +1,25 @@
+CarrierWave.configure do |config|
+  config.fog_credentials = {
+    provider:              'AWS',                        # required
+    aws_access_key_id:     Rails.application.secrets.amazon_access_key_id,                        # required unless using use_iam_profile
+    aws_secret_access_key: Rails.application.secrets.amazon_secret_access_key,                        # required unless using use_iam_profile
+    # use_iam_profile:      true,                         # optional, defaults to false
+    region:                Rails.application.secrets.amazon_region,                  # optional, defaults to 'us-east-1'
+    # host:                  's3.example.com',             # optional, defaults to nil
+    # endpoint:              'https://s3.example.com',             # optional, defaults to nil
+  }
+  config.fog_directory  = Rails.application.secrets.amazon_bucket                                    # required
+  # config.fog_public     = false                                                 # optional, defaults to true
+  # config.fog_attributes = { cache_control: "public, max-age=#{365.days.to_i}" } # optional, defaults to {}
+  # Use this if you have AWS S3 ACLs disabled.
+  # config.fog_attributes = { 'x-amz-acl' => 'bucket-owner-full-control' }
+  # Use this if you have Google Cloud Storage uniform bucket-level access enabled.
+  # config.fog_attributes = { uniform: true }
+  # Use if you use a CDN
+  # config.asset_host = "http://mycdn.cdn.com"
+  # setting here allows you to setup a local dev env that points to production assets if `amazon_bucket_url` doesnt match the bucket other things will break
+  # config.asset_host = Rails.application.secrets.amazon_bucket_url.present? ? "https://#{Rails.application.secrets.amazon_bucket_url}" : nil
+  # For an application which utilizes multiple servers but does not need caches persisted across requests,
+  # uncomment the line :file instead of the default :storage.  Otherwise, it will use AWS as the temp cache store.
+  config.cache_storage = :file
+end
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
new file mode 100644
index 000000000..54f47cf15
--- /dev/null
+++ b/config/initializers/content_security_policy.rb
@@ -0,0 +1,25 @@
+# Be sure to restart your server when you modify this file.
+
+# Define an application-wide content security policy.
+# See the Securing Rails Applications Guide for more information:
+# https://guides.rubyonrails.org/security.html#content-security-policy-header
+
+# Rails.application.configure do
+#   config.content_security_policy do |policy|
+#     policy.default_src :self, :https
+#     policy.font_src    :self, :https, :data
+#     policy.img_src     :self, :https, :data
+#     policy.object_src  :none
+#     policy.script_src  :self, :https
+#     policy.style_src   :self, :https
+#     # Specify URI for violation reports
+#     # policy.report_uri "/csp-violation-report-endpoint"
+#   end
+#
+#   # Generate session nonces for permitted importmap and inline scripts
+#   config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
+#   config.content_security_policy_nonce_directives = %w(script-src)
+#
+#   # Report violations without enforcing the policy.
+#   # config.content_security_policy_report_only = true
+# end
diff --git a/config/initializers/filter_parameter_logging.rb b/config/initializers/filter_parameter_logging.rb
index 599512aba..3ebaf27c4 100644
--- a/config/initializers/filter_parameter_logging.rb
+++ b/config/initializers/filter_parameter_logging.rb
@@ -1,4 +1,4 @@
 # Be sure to restart your server when you modify this file.
 
 # Configure sensitive parameters which will be filtered from the log file.
-Rails.application.config.filter_parameters += [:password, :email, :first_name, :last_name, :zipcode, :street, :city, :state, :country_code, :phone]
+Rails.application.config.filter_parameters += [:password, :email, :first_name, :last_name, :zipcode, :street, :city, :state, :country_code, :phone, :passw, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn]
diff --git a/config/initializers/inflections.rb b/config/initializers/inflections.rb
index ac033bf9d..3860f659e 100644
--- a/config/initializers/inflections.rb
+++ b/config/initializers/inflections.rb
@@ -4,13 +4,13 @@
 # are locale specific, and you may define rules for as many different
 # locales as you wish. All of these examples are active by default:
 # ActiveSupport::Inflector.inflections(:en) do |inflect|
-#   inflect.plural /^(ox)$/i, '\1en'
-#   inflect.singular /^(ox)en/i, '\1'
-#   inflect.irregular 'person', 'people'
+#   inflect.plural /^(ox)$/i, "\\1en"
+#   inflect.singular /^(ox)en/i, "\\1"
+#   inflect.irregular "person", "people"
 #   inflect.uncountable %w( fish sheep )
 # end
 
 # These inflection rules are supported but not enabled by default:
 # ActiveSupport::Inflector.inflections(:en) do |inflect|
-#   inflect.acronym 'RESTful'
+#   inflect.acronym "RESTful"
 # end
diff --git a/config/initializers/paperclip_patch.rb b/config/initializers/paperclip_patch.rb
deleted file mode 100644
index b97735871..000000000
--- a/config/initializers/paperclip_patch.rb
+++ /dev/null
@@ -1,2 +0,0 @@
-# Monkeypatch paperclip's media type detection
-Paperclip::MediaTypeSpoofDetector.prepend MonkeyPatches::OctetStreamOverride
diff --git a/config/initializers/permissions_policy.rb b/config/initializers/permissions_policy.rb
new file mode 100644
index 000000000..00f64d71b
--- /dev/null
+++ b/config/initializers/permissions_policy.rb
@@ -0,0 +1,11 @@
+# Define an application-wide HTTP permissions policy. For further
+# information see https://developers.google.com/web/updates/2018/06/feature-policy
+#
+# Rails.application.config.permissions_policy do |f|
+#   f.camera      :none
+#   f.gyroscope   :none
+#   f.microphone  :none
+#   f.usb         :none
+#   f.fullscreen  :self
+#   f.payment     :self, "https://secure.example.com"
+# end
diff --git a/config/initializers/wrap_parameters.rb b/config/initializers/wrap_parameters.rb
deleted file mode 100644
index 33725e95f..000000000
--- a/config/initializers/wrap_parameters.rb
+++ /dev/null
@@ -1,14 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-# This file contains settings for ActionController::ParamsWrapper which
-# is enabled by default.
-
-# Enable parameter wrapping for JSON. You can disable this by setting :format to an empty array.
-ActiveSupport.on_load(:action_controller) do
-  wrap_parameters format: [:json] if respond_to?(:wrap_parameters)
-end
-
-# To enable root element in JSON for ActiveRecord objects.
-# ActiveSupport.on_load(:active_record) do
-#  self.include_root_in_json = true
-# end
diff --git a/config/routes.rb b/config/routes.rb
index b7b463b8e..954366a12 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -15,9 +15,10 @@
   post "tools/message-congress"
   get "tools/reps"
   get "tools/reps_raw"
+  get "tools/state_reps"
   get "tools/social_buttons_count"
 
-  get "smarty_streets/:action", controller: :smarty_streets
+  get "smarty_streets/street_address", controller: :smarty_streets
   get "petition/:id/recent_signatures", :to => "petition#recent_signatures", :format => 'json'
 
   # Handle notifications from Amazon SES
@@ -79,7 +80,7 @@
       get :generate_key, :on => :collection
     end
 
-    get 'mailer/:action/:id' => 'mailer#:action'
+    get 'mailer/preview_thanks/:id' => 'mailer#preview_thanks'
 
     resources :congress_message_campaigns, only: :none do
       member do
diff --git a/config/secrets.yml b/config/secrets.yml
index 979718643..e7ce221ec 100644
--- a/config/secrets.yml
+++ b/config/secrets.yml
@@ -15,6 +15,8 @@ default: &default
   call_tool_url: <%= ENV["call_tool_url"] %>
   call_tool_api_key: <%= ENV["call_tool_api_key"] %>
   congress_forms_url: <%= ENV["congress_forms_url"] %>
+  google_civic_api_url: <%= ENV["google_civic_api_url"] %>
+  google_civic_api_key: <%= ENV["google_civic_api_key"] %>
   devise_secret_key: <%= ENV["devise_secret_key"] %>
   storage: <%= ENV["storage"] %>
   amazon_access_key_id: <%= ENV["amazon_access_key_id"] %>
diff --git a/config/storage.yml b/config/storage.yml
new file mode 100644
index 000000000..d32f76e8f
--- /dev/null
+++ b/config/storage.yml
@@ -0,0 +1,34 @@
+test:
+  service: Disk
+  root: <%= Rails.root.join("tmp/storage") %>
+
+local:
+  service: Disk
+  root: <%= Rails.root.join("storage") %>
+
+# Use rails credentials:edit to set the AWS secrets (as aws:access_key_id|secret_access_key)
+# amazon:
+#   service: S3
+#   access_key_id: <%= Rails.application.credentials.dig(:aws, :access_key_id) %>
+#   secret_access_key: <%= Rails.application.credentials.dig(:aws, :secret_access_key) %>
+#   region: us-east-1
+#   bucket: your_own_bucket
+
+# Remember not to checkin your GCS keyfile to a repository
+# google:
+#   service: GCS
+#   project: your_project
+#   credentials: <%= Rails.root.join("path/to/gcs.keyfile") %>
+#   bucket: your_own_bucket
+
+# Use rails credentials:edit to set the Azure Storage secret (as azure_storage:storage_access_key)
+# microsoft:
+#   service: AzureStorage
+#   storage_account_name: your_account_name
+#   storage_access_key: <%= Rails.application.credentials.dig(:azure_storage, :storage_access_key) %>
+#   container: your_container_name
+
+# mirror:
+#   service: Mirror
+#   primary: local
+#   mirrors: [ amazon, google, microsoft ]
diff --git a/db/global-bundle.pem b/db/global-bundle.pem
new file mode 100644
index 000000000..5e29fbee5
--- /dev/null
+++ b/db/global-bundle.pem
@@ -0,0 +1,2432 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGCTCCA/GgAwIBAgIRALnItUH64VieFPvDUCOG5E0wDQYJKoZIhvcNAQEMBQAw
+gZwxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTE1MDMGA1UEAwws
+QW1hem9uIFJEUyBhcC1zb3V0aGVhc3QtNSBSb290IENBIFJTQTQwOTYgRzExEDAO
+BgNVBAcMB1NlYXR0bGUwIBcNMjQwNTE1MjE1MDQxWhgPMjEyNDA1MTUyMjUwNDFa
+MIGcMQswCQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywg
+SW5jLjETMBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExNTAzBgNVBAMM
+LEFtYXpvbiBSRFMgYXAtc291dGhlYXN0LTUgUm9vdCBDQSBSU0E0MDk2IEcxMRAw
+DgYDVQQHDAdTZWF0dGxlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
+u2Bc0RjN0vB7EM+h0yts1jSqzDd1v5FcxCDbC7vKPVCq/1pYNTIxQj77HiMcYtvL
+Bfi9AQFibU1C9gN62kUmSe0QaNGqQL2g/6YpB4qI8psIsCt3aIigbhwEEpebhIU/
+vhr/pvLKhkQOSLxJVlX0j18hU5RVqOefCdFm9FmjFLge/m1Yzv2aFifRKIzdtkfp
+4VZBzh7EzP6lxkU3SAcW9yRu/t4oY274ICnGisv2TR15hHlP0wUP6p5S3ot2q/xJ
+57x8nzI3kQyC6a+n+kSzZzITboKWrsx3Jd2PdB4VC84P/YoAC3cwfmacmQVT01c8
+io1eO+BxCtWUNbwCv0Hd10bHI18rVzJhJPb3xg1i1Sc3sbcrADOONsuhxqwffjUe
+XdVMdsjX2mYxQ520qnh5DwQkx3JyW6QwI/ueU9xbMuPTwAauXil7B9qx1IDViYUw
+BvMDnxYbYHlDezYIc4WoNoA2KflMnNtN2WDiM7tvQKmWI8yYZrNdnqBD0HYR+neP
+z69Tqy8i24CDoR9o3s5LxR58SgFPqu9RWu8uL6vfNLL2M8qQ4VueOWSyzRs9b3W5
+GVjA4U1CxlF3EirHEjciq6UEXr5+ZVf79iXGOwBVDzuim1LYfoTBgkMXKxyEzWYT
+QCzf6VPW4x7eMQIriLl18YocHrqJQ7+BfMziYjOh0rcCAwEAAaNCMEAwDwYDVR0T
+AQH/BAUwAwEB/zAdBgNVHQ4EFgQUQdyu9F6eLFuxe437iU/GXyFHU1owDgYDVR0P
+AQH/BAQDAgGGMA0GCSqGSIb3DQEBDAUAA4ICAQCbbNUJRQ1gy1lKxCoszcyujCI5
+df0EGdadQL6BgaXws/uCFvHepB5lO62InAMTURCREeRtrCNyn1rEKnsqhAW0UokQ
+Z+YOHcclgPsXmSQVjIUgnlE45mrPS/9mO8TzhCI3wyiELp6oa67RSiJ1Qcsypa4z
+zHDkYdhFW3sxY8i2p2tqdkJz1ZEQd7FIpX+vrBVIkoqtGAn4urLaMq4CTNJCNepR
+s4OGaoQVY43q2kcguRPDZVOFK5+GlrC2AzHMSVt5fFSCchgYxBZsS3UIVKm8YJ7v
+1h85RwtNCHwwDt1uP43yLp5qfUmsfeaNmZiOk9AawxPCmy6XaSkQcLz+CQhG9T4W
+siQMg6tagIUw1e4zFm7GXmeOCPc//ycGNDXgprMQzjK+AT4ed8iK+JnWlheMq5uf
+XxQDSfakuAIEgJWPAzebjCo33O2j1PQfzbt1Ahs7f+gFczizfpatYkXcOTmLfG1l
+QKj9jVNOIQSJt5PxH+QTDWQtkX/tGp/HS5a3dWusW/TnC3yakGqqfGx3cB/E00gF
+geg0LYo1uOBjIYQbkp3Z6NKfcc/nb0ksV7feKm5f3rSO8NnA0Ou8YHb84LYDLYDf
+VSR9SwSBhGw31otMTAsJdNTHJwfCcxfGtIvUfAsWUAh6qSo4es/hUV60pj01VWpq
+Er+ItMFHuoSTmx18bw==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIECTCCAvGgAwIBAgIRANxgyBbnxgTEOpDul2ZnC0UwDQYJKoZIhvcNAQELBQAw
+gZwxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTE1MDMGA1UEAwws
+QW1hem9uIFJEUyBhcC1zb3V0aGVhc3QtMyBSb290IENBIFJTQTIwNDggRzExEDAO
+BgNVBAcMB1NlYXR0bGUwIBcNMjEwNjEwMTgxOTA3WhgPMjA2MTA2MTAxOTE5MDda
+MIGcMQswCQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywg
+SW5jLjETMBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExNTAzBgNVBAMM
+LEFtYXpvbiBSRFMgYXAtc291dGhlYXN0LTMgUm9vdCBDQSBSU0EyMDQ4IEcxMRAw
+DgYDVQQHDAdTZWF0dGxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
+xnwSDAChrMkfk5TA4Dk8hKzStDlSlONzmd3fTG0Wqr5+x3EmFT6Ksiu/WIwEl9J2
+K98UI7vYyuZfCxUKb1iMPeBdVGqk0zb92GpURd+Iz/+K1ps9ZLeGBkzR8mBmAi1S
+OfpwKiTBzIv6E8twhEn4IUpHsdcuX/2Y78uESpJyM8O5CpkG0JaV9FNEbDkJeBUQ
+Ao2qqNcH4R0Qcr5pyeqA9Zto1RswgL06BQMI9dTpfwSP5VvkvcNUaLl7Zv5WzLQE
+JzORWePvdPzzvWEkY/3FPjxBypuYwssKaERW0fkPDmPtykktP9W/oJolKUFI6pXp
+y+Y6p6/AVdnQD2zZjW5FhQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
+DgQWBBT+jEKs96LC+/X4BZkUYUkzPfXdqTAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZI
+hvcNAQELBQADggEBAIGQqgqcQ6XSGkmNebzR6DhadTbfDmbYeN5N0Vuzv+Tdmufb
+tMGjdjnYMg4B+IVnTKQb+Ox3pL9gbX6KglGK8HupobmIRtwKVth+gYYz3m0SL/Nk
+haWPYzOm0x3tJm8jSdufJcEob4/ATce9JwseLl76pSWdl5A4lLjnhPPKudUDfH+1
+BLNUi3lxpp6GkC8aWUPtupnhZuXddolTLOuA3GwTZySI44NfaFRm+o83N1jp+EwD
+6e94M4cTRzjUv6J3MZmSbdtQP/Tk1uz2K4bQZGP0PZC3bVpqiesdE/xr+wbu8uHr
+cM1JXH0AmXf1yIkTgyWzmvt0k1/vgcw5ixAqvvE=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICrjCCAjSgAwIBAgIRAMnRxsKLYscJV8Qv5pWbL7swCgYIKoZIzj0EAwMwgZYx
+CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu
+MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEvMC0GA1UEAwwmQW1h
+em9uIFJEUyBzYS1lYXN0LTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwIBcNMjEwNTE5MTgxNjAxWhgPMjEyMTA1MTkxOTE2MDFaMIGWMQswCQYD
+VQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEG
+A1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExLzAtBgNVBAMMJkFtYXpvbiBS
+RFMgc2EtZWFzdC0xIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdTZWF0dGxl
+MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEjFOCZgTNVKxLKhUxffiDEvTLFhrmIqdO
+dKqVdgDoELEzIHWDdC+19aDPitbCYtBVHl65ITu/9pn6mMUl5hhUNtfZuc6A+Iw1
+sBe0v0qI3y9Q9HdQYrGgeHDh8M5P7E2ho0IwQDAPBgNVHRMBAf8EBTADAQH/MB0G
+A1UdDgQWBBS5L7/8M0TzoBZk39Ps7BkfTB4yJTAOBgNVHQ8BAf8EBAMCAYYwCgYI
+KoZIzj0EAwMDaAAwZQIwI43O0NtWKTgnVv9z0LO5UMZYgSve7GvGTwqktZYCMObE
+rUI4QerXM9D6JwLy09mqAjEAypfkdLyVWtaElVDUyHFkihAS1I1oUxaaDrynLNQK
+Ou/Ay+ns+J+GyvyDUjBpVVW1
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIECDCCAvCgAwIBAgIQCREfzzVyDTMcNME+gWnTCTANBgkqhkiG9w0BAQsFADCB
+nDELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTUwMwYDVQQDDCxB
+bWF6b24gUkRTIGFwLXNvdXRoZWFzdC0yIFJvb3QgQ0EgUlNBMjA0OCBHMTEQMA4G
+A1UEBwwHU2VhdHRsZTAgFw0yMTA1MjQyMDQyMzNaGA8yMDYxMDUyNDIxNDIzM1ow
+gZwxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTE1MDMGA1UEAwws
+QW1hem9uIFJEUyBhcC1zb3V0aGVhc3QtMiBSb290IENBIFJTQTIwNDggRzExEDAO
+BgNVBAcMB1NlYXR0bGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL
+1MT6br3L/4Pq87DPXtcjlXN3cnbNk2YqRAZHJayStTz8VtsFcGPJOpk14geRVeVk
+e9uKFHRbcyr/RM4owrJTj5X4qcEuATYZbo6ou/rW2kYzuWFZpFp7lqm0vasV4Z9F
+fChlhwkNks0UbM3G+psCSMNSoF19ERunj7w2c4E62LwujkeYLvKGNepjnaH10TJL
+2krpERd+ZQ4jIpObtRcMH++bTrvklc+ei8W9lqrVOJL+89v2piN3Ecdd389uphst
+qQdb1BBVXbhUrtuGHgVf7zKqN1SkCoktoWxVuOprVWhSvr7akaWeq0UmlvbEsujU
+vADqxGMcJFyCzxx3CkJjAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O
+BBYEFFk8UJmlhoxFT3PP12PvhvazHjT4MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG
+9w0BAQsFAAOCAQEAfFtr2lGoWVXmWAsIo2NYre7kzL8Xb9Tx7desKxCCz5HOOvIr
+8JMB1YK6A7IOvQsLJQ/f1UnKRh3X3mJZjKIywfrMSh0FiDf+rjcEzXxw2dGtUem4
+A+WMvIA3jwxnJ90OQj5rQ8bg3iPtE6eojzo9vWQGw/Vu48Dtw1DJo9210Lq/6hze
+hPhNkFh8fMXNT7Q1Wz/TJqJElyAQGNOXhyGpHKeb0jHMMhsy5UNoW5hLeMS5ffao
+TBFWEJ1gVfxIU9QRxSh+62m46JIg+dwDlWv8Aww14KgepspRbMqDuaM2cinoejv6
+t3dyOyHHrsOyv3ffZUKtQhQbQr+sUcL89lARsg==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIEADCCAuigAwIBAgIQB/57HSuaqUkLaasdjxUdPjANBgkqhkiG9w0BAQsFADCB
+mDELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTEwLwYDVQQDDChB
+bWF6b24gUkRTIGFwLXNvdXRoLTEgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYDVQQH
+DAdTZWF0dGxlMCAXDTIxMDUxOTE3NDAzNFoYDzIwNjEwNTE5MTg0MDM0WjCBmDEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTEwLwYDVQQDDChBbWF6
+b24gUkRTIGFwLXNvdXRoLTEgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYDVQQHDAdT
+ZWF0dGxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbkaoVsUS76o
+TgLFmcnaB8cswBk1M3Bf4IVRcwWT3a1HeJSnaJUqWHCJ+u3ip/zGVOYl0gN1MgBb
+MuQRIJiB95zGVcIa6HZtx00VezDTr3jgGWRHmRjNVCCHGmxOZWvJjsIE1xavT/1j
+QYV/ph4EZEIZ/qPq7e3rHohJaHDe23Z7QM9kbyqp2hANG2JtU/iUhCxqgqUHNozV
+Zd0l5K6KnltZQoBhhekKgyiHqdTrH8fWajYl5seD71bs0Axowb+Oh0rwmrws3Db2
+Dh+oc2PwREnjHeca9/1C6J2vhY+V0LGaJmnnIuOANrslx2+bgMlyhf9j0Bv8AwSi
+dSWsobOhNQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb7vJT
+VciLN72yJGhaRKLn6Krn2TAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQAD
+ggEBAAxEj8N9GslReAQnNOBpGl8SLgCMTejQ6AW/bapQvzxrZrfVOZOYwp/5oV0f
+9S1jcGysDM+DrmfUJNzWxq2Y586R94WtpH4UpJDGqZp+FuOVJL313te4609kopzO
+lDdmd+8z61+0Au93wB1rMiEfnIMkOEyt7D2eTFJfJRKNmnPrd8RjimRDlFgcLWJA
+3E8wca67Lz/G0eAeLhRHIXv429y8RRXDtKNNz0wA2RwURWIxyPjn1fHjA9SPDkeW
+E1Bq7gZj+tBnrqz+ra3yjZ2blss6Ds3/uRY6NYqseFTZWmQWT7FolZEnT9vMUitW
+I0VynUbShVpGf6946e0vgaaKw20=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIID/jCCAuagAwIBAgIQGyUVTaVjYJvWhroVEiHPpDANBgkqhkiG9w0BAQsFADCB
+lzELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdB
+bWF6b24gUkRTIHVzLXdlc3QtMSBSb290IENBIFJTQTIwNDggRzExEDAOBgNVBAcM
+B1NlYXR0bGUwIBcNMjEwNTE5MTkwNDA2WhgPMjA2MTA1MTkyMDA0MDZaMIGXMQsw
+CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET
+MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMDAuBgNVBAMMJ0FtYXpv
+biBSRFMgdXMtd2VzdC0xIFJvb3QgQ0EgUlNBMjA0OCBHMTEQMA4GA1UEBwwHU2Vh
+dHRsZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANhyXpJ0t4nigRDZ
+EwNtFOem1rM1k8k5XmziHKDvDk831p7QsX9ZOxl/BT59Pu/P+6W6SvasIyKls1sW
+FJIjFF+6xRQcpoE5L5evMgN/JXahpKGeQJPOX9UEXVW5B8yi+/dyUitFT7YK5LZA
+MqWBN/LtHVPa8UmE88RCDLiKkqiv229tmwZtWT7nlMTTCqiAHMFcryZHx0pf9VPh
+x/iPV8p2gBJnuPwcz7z1kRKNmJ8/cWaY+9w4q7AYlAMaq/rzEqDaN2XXevdpsYAK
+TMMj2kji4x1oZO50+VPNfBl5ZgJc92qz1ocF95SAwMfOUsP8AIRZkf0CILJYlgzk
+/6u6qZECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUm5jfcS9o
++LwL517HpB6hG+PmpBswDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IB
+AQAcQ6lsqxi63MtpGk9XK8mCxGRLCad51+MF6gcNz6i6PAqhPOoKCoFqdj4cEQTF
+F8dCfa3pvfJhxV6RIh+t5FCk/y6bWT8Ls/fYKVo6FhHj57bcemWsw/Z0XnROdVfK
+Yqbc7zvjCPmwPHEqYBhjU34NcY4UF9yPmlLOL8uO1JKXa3CAR0htIoW4Pbmo6sA4
+6P0co/clW+3zzsQ92yUCjYmRNeSbdXbPfz3K/RtFfZ8jMtriRGuO7KNxp8MqrUho
+HK8O0mlSUxGXBZMNicfo7qY8FD21GIPH9w5fp5oiAl7lqFzt3E3sCLD3IiVJmxbf
+fUwpGd1XZBBSdIxysRLM6j48
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIF/jCCA+agAwIBAgIQEM1pS+bWfBJeu/6j1yIIFzANBgkqhkiG9w0BAQwFADCB
+lzELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdB
+bWF6b24gUkRTIGNhLXdlc3QtMSBSb290IENBIFJTQTQwOTYgRzExEDAOBgNVBAcM
+B1NlYXR0bGUwIBcNMjMwOTE5MjIwMTM5WhgPMjEyMzA5MTkyMzAxMzlaMIGXMQsw
+CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET
+MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMDAuBgNVBAMMJ0FtYXpv
+biBSRFMgY2Etd2VzdC0xIFJvb3QgQ0EgUlNBNDA5NiBHMTEQMA4GA1UEBwwHU2Vh
+dHRsZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2Pyp8p5z6HnlGB
+daOj78gZ3ABufxnBFiu5NdFiGoMrS+eY//xxr2iKbnynJAzjmn5A6VKMNxtbuYIZ
+WKAzDb/HrWlIYD2w7ZVBXpylfPhiz3jLNsl03WdPNnEruCcivhY2QMewEVtzjPU0
+ofdbZlO2KpF3biv1gjPuIuE7AUyQAbWnWTlrzETAVWLboJJRRqxASSkFUHNLXod7
+ow02FwlAhcnCp9gSe1SKRDrpvvEvYQBAFB7owfnoQzOGDdd87RGyYfyuW8aFI2Z0
+LHNvsA0dTafO4Rh986c72kDL7ijICQdr5OTgZR2OnuESLk1DSK4xYJ4fA6jb5dJ5
++xsI6tCPykWCW98aO/pha35OsrVNifL/5cH5pdv/ecgQGdffJB+Vdj6f/ZMwR6s/
+Rm37cQ9l3tU8eu/qpzsFjLq1ZUzDaVDWgMW9t49+q/zjhdmbPOabZDao7nHXrVRw
+rwPHWCmEY4OmH6ikEKQW3AChFjOdSg4me/J0Jr5l5jKggLPHWbNLRO8qTTK6N8qk
+ui3aJDi+XQfsTPARXIw4UFErArNImTsoZVyqfX7I4shp0qZbEhP6kRAbfPljw5kW
+Yat7ZlXqDanjsreqbLTaOU10P0rC0/4Ctv5cLSKCrzRLWtpXxhKa2wJTQ74G6fAZ
+1oUA79qg3F8nyM+ZzDsfNI854+PNAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8w
+HQYDVR0OBBYEFLRWiDabEQZNkzEPUCr1ZVJV6xpwMA4GA1UdDwEB/wQEAwIBhjAN
+BgkqhkiG9w0BAQwFAAOCAgEATkVVzkkGBjEtLGDtERi+fSpIV0MxwAsA4PAeBBmb
+myxo90jz6kWkKM1Wm4BkZM8/mq5VbxPef1kxHfb5CHksCL6SgG5KujfIvht+KT2a
+MRJB+III3CbcTy0HtwCX5AlPIbXWydhQFoJTW/OkpecUWoyFM6SqYeYZx1itJpxl
+sXshLjYOvw+QgvxRsDxqUfkcaC/N2yhu/30Zo2P8msJfAFry2UmA/TBrWOQKVQxl
+Ee/yWgp4U/bC/GZnjWnWDTwkRFGQtI4wjxbVuX6V4FTLCT7kIoHBhG+zOSduJRn3
+Axej7gkEXEVc/PAnwp/kSJ/b0/JONLWdjGUFkyiMn1yJlhJ2sg39vepBN5r6yVYU
+nJWoZAuupRpoIKfmC3/cZanXqYbYl4yxzX/PMB4kAACfdxGxLawjnnBjSzaWokXs
+YVh2TjWpUMwLOi0RB2mtPUjHdDLKtjOTZ1zHZnR/wVp9BmVI1BXYnz5PAqU5XqeD
+EmanyaAuFCeyol1EtbQhgtysThQ+vwYAXMm2iKzJxq0hik8wyG8X55FhnGEOGV3u
+xxq7odd3/8BXkc3dGdBPQtH+k5glaQyPnAsLVAIUvyzTmy58saL+nJnQY4mmRrwV
+1jJA7nnkaklI/L5fvfCg0W+TMinCOAGd+GQ4hK2SAsJLtcqiBgPf2wJHO8wiwUh9
+Luw=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGCTCCA/GgAwIBAgIRAOXxJuyXVkbfhZCkS/dOpfEwDQYJKoZIhvcNAQEMBQAw
+gZwxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTE1MDMGA1UEAwws
+QW1hem9uIFJEUyBhcC1ub3J0aGVhc3QtMSBSb290IENBIFJTQTQwOTYgRzExEDAO
+BgNVBAcMB1NlYXR0bGUwIBcNMjEwNTI1MjE1OTEwWhgPMjEyMTA1MjUyMjU5MTBa
+MIGcMQswCQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywg
+SW5jLjETMBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExNTAzBgNVBAMM
+LEFtYXpvbiBSRFMgYXAtbm9ydGhlYXN0LTEgUm9vdCBDQSBSU0E0MDk2IEcxMRAw
+DgYDVQQHDAdTZWF0dGxlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
+xiP4RDYm4tIS12hGgn1csfO8onQDmK5SZDswUpl0HIKXOUVVWkHNlINkVxbdqpqH
+FhbyZmNN6F/EWopotMDKe1B+NLrjNQf4zefv2vyKvPHJXhxoKmfyuTd5Wk8k1F7I
+lNwLQzznB+ElhrLIDJl9Ro8t31YBBNFRGAGEnxyACFGcdkjlsa52UwfYrwreEg2l
+gW5AzqHgjFfj9QRLydeU/n4bHm0F1adMsV7P3rVwilcUlqsENDwXnWyPEyv3sw6F
+wNemLEs1129mB77fwvySb+lLNGsnzr8w4wdioZ74co+T9z2ca+eUiP+EQccVw1Is
+D4Fh57IjPa6Wuc4mwiUYKkKY63+38aCfEWb0Qoi+zW+mE9nek6MOQ914cN12u5LX
+dBoYopphRO5YmubSN4xcBy405nIdSdbrAVWwxXnVVyjqjknmNeqQsPZaxAhdoKhV
+AqxNr8AUAdOAO6Sz3MslmcLlDXFihrEEOeUbpg/m1mSUUHGbu966ajTG1FuEHHwS
+7WB52yxoJo/tHvt9nAWnh3uH5BHmS8zn6s6CGweWKbX5yICnZ1QFR1e4pogxX39v
+XD6YcNOO+Vn+HY4nXmjgSYVC7l+eeP8eduMg1xJujzjrbmrXU+d+cBObgdTOAlpa
+JFHaGwYw1osAwPCo9cZ2f04yitBfj9aPFia8ASKldakCAwEAAaNCMEAwDwYDVR0T
+AQH/BAUwAwEB/zAdBgNVHQ4EFgQUqKS+ltlior0SyZKYAkJ/efv55towDgYDVR0P
+AQH/BAQDAgGGMA0GCSqGSIb3DQEBDAUAA4ICAQAdElvp8bW4B+Cv+1WSN87dg6TN
+wGyIjJ14/QYURgyrZiYpUmZpj+/pJmprSWXu4KNyqHftmaidu7cdjL5nCAvAfnY5
+/6eDDbX4j8Gt9fb/6H9y0O0dn3mUPSEKG0crR+JRFAtPhn/2FNvst2P82yguWLv0
+pHjHVUVcq+HqDMtUIJsTPYjSh9Iy77Q6TOZKln9dyDOWJpCSkiUWQtMAKbCSlvzd
+zTs/ahqpT+zLfGR1SR+T3snZHgQnbnemmz/XtlKl52NxccARwfcEEKaCRQyGq/pR
+0PVZasyJS9JY4JfQs4YOdeOt4UMZ8BmW1+BQWGSkkb0QIRl8CszoKofucAlqdPcO
+IT/ZaMVhI580LFGWiQIizWFskX6lqbCyHqJB3LDl8gJISB5vNTHOHpvpMOMs5PYt
+cRl5Mrksx5MKMqG7y5R734nMlZxQIHjL5FOoOxTBp9KeWIL/Ib89T2QDaLw1SQ+w
+ihqWBJ4ZdrIMWYpP3WqM+MXWk7WAem+xsFJdR+MDgOOuobVQTy5dGBlPks/6gpjm
+rO9TjfQ36ppJ3b7LdKUPeRfnYmlR5RU4oyYJ//uLbClI443RZAgxaCXX/nyc12lr
+eVLUMNF2abLX4/VF63m2/Z9ACgMRfqGshPssn1NN33OonrotQoj4S3N9ZrjvzKt8
+iHcaqd60QKpfiH2A3A==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGCDCCA/CgAwIBAgIQChu3v5W1Doil3v6pgRIcVzANBgkqhkiG9w0BAQwFADCB
+nDELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTUwMwYDVQQDDCxB
+bWF6b24gUkRTIEJldGEgdXMtZWFzdC0xIFJvb3QgQ0EgUlNBNDA5NiBHMTEQMA4G
+A1UEBwwHU2VhdHRsZTAgFw0yMTA1MTgyMTM0MTVaGA8yMTIxMDUxODIyMzQxNVow
+gZwxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTE1MDMGA1UEAwws
+QW1hem9uIFJEUyBCZXRhIHVzLWVhc3QtMSBSb290IENBIFJTQTQwOTYgRzExEDAO
+BgNVBAcMB1NlYXR0bGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1
+FUGQ5tf3OwpDR6hGBxhUcrkwKZhaXP+1St1lSOQvjG8wXT3RkKzRGMvb7Ee0kzqI
+mzKKe4ASIhtV3UUWdlNmP0EA3XKnif6N79MismTeGkDj75Yzp5A6tSvqByCgxIjK
+JqpJrch3Dszoyn8+XhwDxMZtkUa5nQVdJgPzJ6ltsQ8E4SWLyLtTu0S63jJDkqYY
+S7cQblk7y7fel+Vn+LS5dGTdRRhMvSzEnb6mkVBaVzRyVX90FNUED06e8q+gU8Ob
+htvQlf9/kRzHwRAdls2YBhH40ZeyhpUC7vdtPwlmIyvW5CZ/QiG0yglixnL6xahL
+pbmTuTSA/Oqz4UGQZv2WzHe1lD2gRHhtFX2poQZeNQX8wO9IcUhrH5XurW/G9Xwl
+Sat9CMPERQn4KC3HSkat4ir2xaEUrjfg6c4XsGyh2Pk/LZ0gLKum0dyWYpWP4JmM
+RQNjrInXPbMhzQObozCyFT7jYegS/3cppdyy+K1K7434wzQGLU1gYXDKFnXwkX8R
+bRKgx2pHNbH5lUddjnNt75+e8m83ygSq/ZNBUz2Ur6W2s0pl6aBjwaDES4VfWYlI
+jokcmrGvJNDfQWygb1k00eF2bzNeNCHwgWsuo3HSxVgc/WGsbcGrTlDKfz+g3ich
+bXUeUidPhRiv5UQIVCLIHpHuin3bj9lQO/0t6p+tAQIDAQABo0IwQDAPBgNVHRMB
+Af8EBTADAQH/MB0GA1UdDgQWBBSFmMBgm5IsRv3hLrvDPIhcPweXYTAOBgNVHQ8B
+Af8EBAMCAYYwDQYJKoZIhvcNAQEMBQADggIBAAa2EuozymOsQDJlEi7TqnyA2OhT
+GXPfYqCyMJVkfrqNgcnsNpCAiNEiZbb+8sIPXnT8Ay8hrwJYEObJ5b7MHXpLuyft
+z0Pu1oFLKnQxKjNxrIsCvaB4CRRdYjm1q7EqGhMGv76se9stOxkOqO9it31w/LoU
+ENDk7GLsSqsV1OzYLhaH8t+MaNP6rZTSNuPrHwbV3CtBFl2TAZ7iKgKOhdFz1Hh9
+Pez0lG+oKi4mHZ7ajov6PD0W7njn5KqzCAkJR6OYmlNVPjir+c/vUtEs0j+owsMl
+g7KE5g4ZpTRShyh5BjCFRK2tv0tkqafzNtxrKC5XNpEkqqVTCnLcKG+OplIEadtr
+C7UWf4HyhCiR+xIyxFyR05p3uY/QQU/5uza7GlK0J+U1sBUytx7BZ+Fo8KQfPPqV
+CqDCaYUksoJcnJE/KeoksyqNQys7sDGJhkd0NeUGDrFLKHSLhIwAMbEWnqGxvhli
+E7sP2E5rI/I9Y9zTbLIiI8pfeZlFF8DBdoP/Hzg8pqsiE/yiXSFTKByDwKzGwNqz
+F0VoFdIZcIbLdDbzlQitgGpJtvEL7HseB0WH7B2PMMD8KPJlYvPveO3/6OLzCsav
++CAkvk47NQViKMsUTKOA0JDCW+u981YRozxa3K081snhSiSe83zIPBz1ikldXxO9
+6YYLNPRrj3mi9T/f
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIEADCCAuigAwIBAgIQAhAteLRCvizAElaWORFU2zANBgkqhkiG9w0BAQsFADCB
+mDELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTEwLwYDVQQDDChB
+bWF6b24gUkRTIG1lLXNvdXRoLTEgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYDVQQH
+DAdTZWF0dGxlMCAXDTIxMDUyMDE3MDkxNloYDzIwNjEwNTIwMTgwOTE2WjCBmDEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTEwLwYDVQQDDChBbWF6
+b24gUkRTIG1lLXNvdXRoLTEgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYDVQQHDAdT
+ZWF0dGxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qg7JAcOVKjh
+N83SACnBFZPyB63EusfDr/0V9ZdL8lKcmZX9sv/CqoBo3N0EvBqHQqUUX6JvFb7F
+XrMUZ740kr28gSRALfXTFgNODjXeDsCtEkKRTkac/UM8xXHn+hR7UFRPHS3e0GzI
+iLiwQWDkr0Op74W8aM0CfaVKvh2bp4BI1jJbdDnQ9OKXpOxNHGUf0ZGb7TkNPkgI
+b2CBAc8J5o3H9lfw4uiyvl6Fz5JoP+A+zPELAioYBXDrbE7wJeqQDJrETWqR9VEK
+BXURCkVnHeaJy123MpAX2ozf4pqk0V0LOEOZRS29I+USF5DcWr7QIXR/w2I8ws1Q
+7ys+qbE+kQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQFJ16n
+1EcCMOIhoZs/F9sR+Jy++zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQAD
+ggEBAOc5nXbT3XTDEZsxX2iD15YrQvmL5m13B3ImZWpx/pqmObsgx3/dg75rF2nQ
+qS+Vl+f/HLh516pj2BPP/yWCq12TRYigGav8UH0qdT3CAClYy2o+zAzUJHm84oiB
+ud+6pFVGkbqpsY+QMpJUbZWu52KViBpJMYsUEy+9cnPSFRVuRAHjYynSiLk2ZEjb
+Wkdc4x0nOZR5tP0FgrX0Ve2KcjFwVQJVZLgOUqmFYQ/G0TIIGTNh9tcmR7yp+xJR
+A2tbPV2Z6m9Yxx4E8lLEPNuoeouJ/GR4CkMEmF8cLwM310t174o3lKKUXJ4Vs2HO
+Wj2uN6R9oI+jGLMSswTzCNV1vgc=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICrjCCAjOgAwIBAgIQS7vMpOTVq2Jw457NdZ2ffjAKBggqhkjOPQQDAzCBljEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMS8wLQYDVQQDDCZBbWF6
+b24gUkRTIGNhLXdlc3QtMSBSb290IENBIEVDQzM4NCBHMTEQMA4GA1UEBwwHU2Vh
+dHRsZTAgFw0yMzA5MTkyMjExNDNaGA8yMTIzMDkxOTIzMTE0M1owgZYxCzAJBgNV
+BAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMuMRMwEQYD
+VQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEvMC0GA1UEAwwmQW1hem9uIFJE
+UyBjYS13ZXN0LTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1NlYXR0bGUw
+djAQBgcqhkjOPQIBBgUrgQQAIgNiAARdgGSs/F2lpWKqS1ZpcmatFED1JurmNbXG
+Sqhv1A/geHrKCS15MPwjtnfZiujYKY4fNkCCUseoGDwkC4281nwkokvnfWR1/cXy
+LxfACoXNxsI4b+37CezSUBl48/5p1/OjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD
+VR0OBBYEFFhLokGBuJGwKJhZcYSYKyZIitJtMA4GA1UdDwEB/wQEAwIBhjAKBggq
+hkjOPQQDAwNpADBmAjEA8aQQlzJRHbqFsRY4O3u/cN0T8dzjcqnYn4NV1w+jvhzt
+QPJLB+ggGyQhoFR6G2UrAjEA0be8OP5MWXD8d01KKbo5Dpy6TwukF5qoJmkFJKS3
+bKfEMvFWxXoV06HNZFWdI80u
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIF/zCCA+egAwIBAgIRAPvvd+MCcp8E36lHziv0xhMwDQYJKoZIhvcNAQEMBQAw
+gZcxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEwMC4GA1UEAwwn
+QW1hem9uIFJEUyB1cy1lYXN0LTIgUm9vdCBDQSBSU0E0MDk2IEcxMRAwDgYDVQQH
+DAdTZWF0dGxlMCAXDTIxMDUyMTIzMTEwNloYDzIxMjEwNTIyMDAxMTA2WjCBlzEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdBbWF6
+b24gUkRTIHVzLWVhc3QtMiBSb290IENBIFJTQTQwOTYgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDbvwekKIKGcV/s
+lDU96a71ZdN2pTYkev1X2e2/ICb765fw/i1jP9MwCzs8/xHBEQBJSxdfO4hPeNx3
+ENi0zbM+TrMKliS1kFVe1trTTEaHYjF8BMK9yTY0VgSpWiGxGwg4tshezIA5lpu8
+sF6XMRxosCEVCxD/44CFqGZTzZaREIvvFPDTXKJ6yOYnuEkhH3OcoOajHN2GEMMQ
+ShuyRFDQvYkqOC/Q5icqFbKg7eGwfl4PmimdV7gOVsxSlw2s/0EeeIILXtHx22z3
+8QBhX25Lrq2rMuaGcD3IOMBeBo2d//YuEtd9J+LGXL9AeOXHAwpvInywJKAtXTMq
+Wsy3LjhuANFrzMlzjR2YdjkGVzeQVx3dKUzJ2//Qf7IXPSPaEGmcgbxuatxjnvfT
+H85oeKr3udKnXm0Kh7CLXeqJB5ITsvxI+Qq2iXtYCc+goHNR01QJwtGDSzuIMj3K
+f+YMrqBXZgYBwU2J/kCNTH31nfw96WTbOfNGwLwmVRDgguzFa+QzmQsJW4FTDMwc
+7cIjwdElQQVA+Gqa67uWmyDKAnoTkudmgAP+OTBkhnmc6NJuZDcy6f/iWUdl0X0u
+/tsfgXXR6ZovnHonM13ANiN7VmEVqFlEMa0VVmc09m+2FYjjlk8F9sC7Rc4wt214
+7u5YvCiCsFZwx44baP5viyRZgkJVpQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/
+MB0GA1UdDgQWBBQgCZCsc34nVTRbWsniXBPjnUTQ2DAOBgNVHQ8BAf8EBAMCAYYw
+DQYJKoZIhvcNAQEMBQADggIBAAQas3x1G6OpsIvQeMS9BbiHG3+kU9P/ba6Rrg+E
+lUz8TmL04Bcd+I+R0IyMBww4NznT+K60cFdk+1iSmT8Q55bpqRekyhcdWda1Qu0r
+JiTi7zz+3w2v66akofOnGevDpo/ilXGvCUJiLOBnHIF0izUqzvfczaMZGJT6xzKq
+PcEVRyAN1IHHf5KnGzUlVFv9SGy47xJ9I1vTk24JU0LWkSLzMMoxiUudVmHSqJtN
+u0h+n/x3Q6XguZi1/C1KOntH56ewRh8n5AF7c+9LJJSRM9wunb0Dzl7BEy21Xe9q
+03xRYjf5wn8eDELB8FZPa1PrNKXIOLYM9egdctbKEcpSsse060+tkyBrl507+SJT
+04lvJ4tcKjZFqxn+bUkDQvXYj0D3WK+iJ7a8kZJPRvz8BDHfIqancY8Tgw+69SUn
+WqIb+HNZqFuRs16WFSzlMksqzXv6wcDSyI7aZOmCGGEcYW9NHk8EuOnOQ+1UMT9C
+Qb1GJcipjRzry3M4KN/t5vN3hIetB+/PhmgTO4gKhBETTEyPC3HC1QbdVfRndB6e
+U/NF2U/t8U2GvD26TTFLK4pScW7gyw4FQyXWs8g8FS8f+R2yWajhtS9++VDJQKom
+fAUISoCH+PlPRJpu/nHd1Zrddeiiis53rBaLbXu2J1Q3VqjWOmtj0HjxJJxWnYmz
+Pqj2
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIF/jCCA+agAwIBAgIQXY/dmS+72lZPranO2JM9jjANBgkqhkiG9w0BAQwFADCB
+lzELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdB
+bWF6b24gUkRTIGFwLWVhc3QtMSBSb290IENBIFJTQTQwOTYgRzExEDAOBgNVBAcM
+B1NlYXR0bGUwIBcNMjEwNTI1MjEzNDUxWhgPMjEyMTA1MjUyMjM0NTFaMIGXMQsw
+CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET
+MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMDAuBgNVBAMMJ0FtYXpv
+biBSRFMgYXAtZWFzdC0xIFJvb3QgQ0EgUlNBNDA5NiBHMTEQMA4GA1UEBwwHU2Vh
+dHRsZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMyW9kBJjD/hx8e8
+b5E1sF42bp8TXsz1htSYE3Tl3T1Aq379DfEhB+xa/ASDZxt7/vwa81BkNo4M6HYq
+okYIXeE7cu5SnSgjWXqcERhgPevtAwgmhdE3yREe8oz2DyOi2qKKZqah+1gpPaIQ
+fK0uAqoeQlyHosye3KZZKkDHBatjBsQ5kf8lhuf7wVulEZVRHY2bP2X7N98PfbpL
+QdH7mWXzDtJJ0LiwFwds47BrkgK1pkHx2p1mTo+HMkfX0P6Fq1atkVC2RHHtbB/X
+iYyH7paaHBzviFrhr679zNqwXIOKlbf74w3mS11P76rFn9rS1BAH2Qm6eY5S/Fxe
+HEKXm4kjPN63Zy0p3yE5EjPt54yPkvumOnT+RqDGJ2HCI9k8Ehcbve0ogfdRKNqQ
+VHWYTy8V33ndQRHZlx/CuU1yN61TH4WSoMly1+q1ihTX9sApmlQ14B2pJi/9DnKW
+cwECrPy1jAowC2UJ45RtC8UC05CbP9yrIy/7Noj8gQDiDOepm+6w1g6aNlWoiuQS
+kyI6nzz1983GcnOHya73ga7otXo0Qfg9jPghlYiMomrgshlSLDHZG0Ib/3hb8cnR
+1OcN9FpzNmVK2Ll1SmTMLrIhuCkyNYX9O/bOknbcf706XeESxGduSkHEjIw/k1+2
+Atteoq5dT6cwjnJ9hyhiueVlVkiDAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8w
+HQYDVR0OBBYEFLUI+DD7RJs+0nRnjcwIVWzzYSsFMA4GA1UdDwEB/wQEAwIBhjAN
+BgkqhkiG9w0BAQwFAAOCAgEAb1mcCHv4qMQetLGTBH9IxsB2YUUhr5dda0D2BcHr
+UtDbfd0VQs4tux6h/6iKwHPx0Ew8fuuYj99WknG0ffgJfNc5/fMspxR/pc1jpdyU
+5zMQ+B9wi0lOZPO9uH7/pr+d2odcNEy8zAwqdv/ihsTwLmGP54is9fVbsgzNW1cm
+HKAVL2t/Ope+3QnRiRilKCN1lzhav4HHdLlN401TcWRWKbEuxF/FgxSO2Hmx86pj
+e726lweCTMmnq/cTsPOVY0WMjs0or3eHDVlyLgVeV5ldyN+ptg3Oit60T05SRa58
+AJPTaVKIcGQ/gKkKZConpu7GDofT67P/ox0YNY57LRbhsx9r5UY4ROgz7WMQ1yoS
+Y+19xizm+mBm2PyjMUbfwZUyCxsdKMwVdOq5/UmTmdms+TR8+m1uBHPOTQ2vKR0s
+Pd/THSzPuu+d3dbzRyDSLQbHFFneG760CUlD/ZmzFlQjJ89/HmAmz8IyENq+Sjhx
+Jgzy+FjVZb8aRUoYLlnffpUpej1n87Ynlr1GrvC4GsRpNpOHlwuf6WD4W0qUTsC/
+C9JO+fBzUj/aWlJzNcLEW6pte1SB+EdkR2sZvWH+F88TxemeDrV0jKJw5R89CDf8
+ZQNfkxJYjhns+YeV0moYjqQdc7tq4i04uggEQEtVzEhRLU5PE83nlh/K2NZZm8Kj
+dIA=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGBTCCA+2gAwIBAgIRAJfKe4Zh4aWNt3bv6ZjQwogwDQYJKoZIhvcNAQEMBQAw
+gZoxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEzMDEGA1UEAwwq
+QW1hem9uIFJEUyBjYS1jZW50cmFsLTEgUm9vdCBDQSBSU0E0MDk2IEcxMRAwDgYD
+VQQHDAdTZWF0dGxlMCAXDTIxMDUyMTIyMDg1M1oYDzIxMjEwNTIxMjMwODUzWjCB
+mjELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTMwMQYDVQQDDCpB
+bWF6b24gUkRTIGNhLWNlbnRyYWwtMSBSb290IENBIFJTQTQwOTYgRzExEDAOBgNV
+BAcMB1NlYXR0bGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpgUH6
+Crzd8cOw9prAh2rkQqAOx2vtuI7xX4tmBG4I/um28eBjyVmgwQ1fpq0Zg2nCKS54
+Nn0pCmT7f3h6Bvopxn0J45AzXEtajFqXf92NQ3iPth95GVfAJSD7gk2LWMhpmID9
+JGQyoGuDPg+hYyr292X6d0madzEktVVGO4mKTF989qEg+tY8+oN0U2fRTrqa2tZp
+iYsmg350ynNopvntsJAfpCO/srwpsqHHLNFZ9jvhTU8uW90wgaKO9i31j/mHggCE
++CAOaJCM3g+L8DPl/2QKsb6UkBgaaIwKyRgKSj1IlgrK+OdCBCOgM9jjId4Tqo2j
+ZIrrPBGl6fbn1+etZX+2/tf6tegz+yV0HHQRAcKCpaH8AXF44bny9andslBoNjGx
+H6R/3ib4FhPrnBMElzZ5i4+eM/cuPC2huZMBXb/jKgRC/QN1Wm3/nah5FWq+yn+N
+tiAF10Ga0BYzVhHDEwZzN7gn38bcY5yi/CjDUNpY0OzEe2+dpaBKPlXTaFfn9Nba
+CBmXPRF0lLGGtPeTAgjcju+NEcVa82Ht1pqxyu2sDtbu3J5bxp4RKtj+ShwN8nut
+Tkf5Ea9rSmHEY13fzgibZlQhXaiFSKA2ASUwgJP19Putm0XKlBCNSGCoECemewxL
++7Y8FszS4Uu4eaIwvXVqUEE2yf+4ex0hqQ1acQIDAQABo0IwQDAPBgNVHRMBAf8E
+BTADAQH/MB0GA1UdDgQWBBSeUnXIRxNbYsZLtKomIz4Y1nOZEzAOBgNVHQ8BAf8E
+BAMCAYYwDQYJKoZIhvcNAQEMBQADggIBAIpRvxVS0dzoosBh/qw65ghPUGSbP2D4
+dm6oYCv5g/zJr4fR7NzEbHOXX5aOQnHbQL4M/7veuOCLNPOW1uXwywMg6gY+dbKe
+YtPVA1as8G9sUyadeXyGh2uXGsziMFXyaESwiAXZyiYyKChS3+g26/7jwECFo5vC
+XGhWpIO7Hp35Yglp8AnwnEAo/PnuXgyt2nvyTSrxlEYa0jus6GZEZd77pa82U1JH
+qFhIgmKPWWdvELA3+ra1nKnvpWM/xX0pnMznMej5B3RT3Y+k61+kWghJE81Ix78T
++tG4jSotgbaL53BhtQWBD1yzbbilqsGE1/DXPXzHVf9yD73fwh2tGWSaVInKYinr
+a4tcrB3KDN/PFq0/w5/21lpZjVFyu/eiPj6DmWDuHW73XnRwZpHo/2OFkei5R7cT
+rn/YdDD6c1dYtSw5YNnS6hdCQ3sOiB/xbPRN9VWJa6se79uZ9NLz6RMOr73DNnb2
+bhIR9Gf7XAA5lYKqQk+A+stoKbIT0F65RnkxrXi/6vSiXfCh/bV6B41cf7MY/6YW
+ehserSdjhQamv35rTFdM+foJwUKz1QN9n9KZhPxeRmwqPitAV79PloksOnX25ElN
+SlyxdndIoA1wia1HRd26EFm2pqfZ2vtD2EjU3wD42CXX4H8fKVDna30nNFSYF0yn
+jGKc3k6UNxpg
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIF/jCCA+agAwIBAgIQaRHaEqqacXN20e8zZJtmDDANBgkqhkiG9w0BAQwFADCB
+lzELMAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIElu
+Yy4xEzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdB
+bWF6b24gUkRTIHVzLWVhc3QtMSBSb290IENBIFJTQTQwOTYgRzExEDAOBgNVBAcM
+B1NlYXR0bGUwIBcNMjEwNTI1MjIzODM1WhgPMjEyMTA1MjUyMzM4MzVaMIGXMQsw
+CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET
+MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMDAuBgNVBAMMJ0FtYXpv
+biBSRFMgdXMtZWFzdC0xIFJvb3QgQ0EgUlNBNDA5NiBHMTEQMA4GA1UEBwwHU2Vh
+dHRsZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAInfBCaHuvj6Rb5c
+L5Wmn1jv2PHtEGMHm+7Z8dYosdwouG8VG2A+BCYCZfij9lIGszrTXkY4O7vnXgru
+JUNdxh0Q3M83p4X+bg+gODUs3jf+Z3Oeq7nTOk/2UYvQLcxP4FEXILxDInbQFcIx
+yen1ESHggGrjEodgn6nbKQNRfIhjhW+TKYaewfsVWH7EF2pfj+cjbJ6njjgZ0/M9
+VZifJFBgat6XUTOf3jwHwkCBh7T6rDpgy19A61laImJCQhdTnHKvzTpxcxiLRh69
+ZObypR7W04OAUmFS88V7IotlPmCL8xf7kwxG+gQfvx31+A9IDMsiTqJ1Cc4fYEKg
+bL+Vo+2Ii4W2esCTGVYmHm73drznfeKwL+kmIC/Bq+DrZ+veTqKFYwSkpHRyJCEe
+U4Zym6POqQ/4LBSKwDUhWLJIlq99bjKX+hNTJykB+Lbcx0ScOP4IAZQoxmDxGWxN
+S+lQj+Cx2pwU3S/7+OxlRndZAX/FKgk7xSMkg88HykUZaZ/ozIiqJqSnGpgXCtED
+oQ4OJw5ozAr+/wudOawaMwUWQl5asD8fuy/hl5S1nv9XxIc842QJOtJFxhyeMIXt
+LVECVw/dPekhMjS3Zo3wwRgYbnKG7YXXT5WMxJEnHu8+cYpMiRClzq2BEP6/MtI2
+AZQQUFu2yFjRGL2OZA6IYjxnXYiRAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8w
+HQYDVR0OBBYEFADCcQCPX2HmkqQcmuHfiQ2jjqnrMA4GA1UdDwEB/wQEAwIBhjAN
+BgkqhkiG9w0BAQwFAAOCAgEASXkGQ2eUmudIKPeOIF7RBryCoPmMOsqP0+1qxF8l
+pGkwmrgNDGpmd9s0ArfIVBTc1jmpgB3oiRW9c6n2OmwBKL4UPuQ8O3KwSP0iD2sZ
+KMXoMEyphCEzW1I2GRvYDugL3Z9MWrnHkoaoH2l8YyTYvszTvdgxBPpM2x4pSkp+
+76d4/eRpJ5mVuQ93nC+YG0wXCxSq63hX4kyZgPxgCdAA+qgFfKIGyNqUIqWgeyTP
+n5OgKaboYk2141Rf2hGMD3/hsGm0rrJh7g3C0ZirPws3eeJfulvAOIy2IZzqHUSY
+jkFzraz6LEH3IlArT3jUPvWKqvh2lJWnnp56aqxBR7qHH5voD49UpJWY1K0BjGnS
+OHcurpp0Yt/BIs4VZeWdCZwI7JaSeDcPMaMDBvND3Ia5Fga0thgYQTG6dE+N5fgF
+z+hRaujXO2nb0LmddVyvE8prYlWRMuYFv+Co8hcMdJ0lEZlfVNu0jbm9/GmwAZ+l
+9umeYO9yz/uC7edC8XJBglMAKUmVK9wNtOckUWAcCfnPWYLbYa/PqtXBYcxrso5j
+iaS/A7iEW51uteHBGrViCy1afGG+hiUWwFlesli+Rq4dNstX3h6h2baWABaAxEVJ
+y1RnTQSz6mROT1VmZSgSVO37rgIyY0Hf0872ogcTS+FfvXgBxCxsNWEbiQ/XXva4
+0Ws=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICtDCCAjqgAwIBAgIRAMyaTlVLN0ndGp4ffwKAfoMwCgYIKoZIzj0EAwMwgZkx
+CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu
+MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEyMDAGA1UEAwwpQW1h
+em9uIFJEUyBtZS1jZW50cmFsLTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcM
+B1NlYXR0bGUwIBcNMjIwNTA3MDA0NDM3WhgPMjEyMjA1MDcwMTQ0MzdaMIGZMQsw
+CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET
+MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMjAwBgNVBAMMKUFtYXpv
+biBSRFMgbWUtY2VudHJhbC0xIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdT
+ZWF0dGxlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE19nCV1nsI6CohSor13+B25cr
+zg+IHdi9Y3L7ziQnHWI6yjBazvnKD+oC71aRRlR8b5YXsYGUQxWzPLHN7EGPcSGv
+bzA9SLG1KQYCJaQ0m9Eg/iGrwKWOgylbhVw0bCxoo0IwQDAPBgNVHRMBAf8EBTAD
+AQH/MB0GA1UdDgQWBBS4KsknsJXM9+QPEkBdZxUPaLr11zAOBgNVHQ8BAf8EBAMC
+AYYwCgYIKoZIzj0EAwMDaAAwZQIxAJaRgrYIEfXQMZQQDxMTYS0azpyWSseQooXo
+L3nYq4OHGBgYyQ9gVjvRYWU85PXbfgIwdi82DtANQFkCu+j+BU0JBY/uRKPEeYzo
+JG92igKIcXPqCoxIJ7lJbbzmuf73gQu5
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICrjCCAjSgAwIBAgIRAPAlEk8VJPmEzVRRaWvTh2AwCgYIKoZIzj0EAwMwgZYx
+CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu
+MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEvMC0GA1UEAwwmQW1h
+em9uIFJEUyB1cy1lYXN0LTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwIBcNMjEwNTI1MjI0MTU1WhgPMjEyMTA1MjUyMzQxNTVaMIGWMQswCQYD
+VQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEG
+A1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExLzAtBgNVBAMMJkFtYXpvbiBS
+RFMgdXMtZWFzdC0xIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdTZWF0dGxl
+MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEx5xjrup8II4HOJw15NTnS3H5yMrQGlbj
+EDA5MMGnE9DmHp5dACIxmPXPMe/99nO7wNdl7G71OYPCgEvWm0FhdvVUeTb3LVnV
+BnaXt32Ek7/oxGk1T+Df03C+W0vmuJ+wo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0G
+A1UdDgQWBBTGXmqBWN/1tkSea4pNw0oHrjk2UDAOBgNVHQ8BAf8EBAMCAYYwCgYI
+KoZIzj0EAwMDaAAwZQIxAIqqZWCSrIkZ7zsv/FygtAusW6yvlL935YAWYPVXU30m
+jkMFLM+/RJ9GMvnO8jHfCgIwB+whlkcItzE9CRQ6CsMo/d5cEHDUu/QW6jSIh9BR
+OGh9pTYPVkUbBiKPA7lVVhre
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICtDCCAjmgAwIBAgIQKKqVZvk6NsLET+uYv5myCzAKBggqhkjOPQQDAzCBmTEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTIwMAYDVQQDDClBbWF6
+b24gUkRTIGlsLWNlbnRyYWwtMSBSb290IENBIEVDQzM4NCBHMTEQMA4GA1UEBwwH
+U2VhdHRsZTAgFw0yMjEyMDIyMDMyMjBaGA8yMTIyMTIwMjIxMzIyMFowgZkxCzAJ
+BgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMuMRMw
+EQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEyMDAGA1UEAwwpQW1hem9u
+IFJEUyBpbC1jZW50cmFsLTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASYwfvj8BmvLAP6UkNQ4X4dXBB/
+webBO7swW+8HnFN2DAu+Cn/lpcDpu+dys1JmkVX435lrCH3oZjol0kCDIM1lF4Cv
++78yoY1Jr/YMat22E4iz4AZd9q0NToS7+ZA0r2yjQjBAMA8GA1UdEwEB/wQFMAMB
+Af8wHQYDVR0OBBYEFO/8Py16qPr7J2GWpvxlTMB+op7XMA4GA1UdDwEB/wQEAwIB
+hjAKBggqhkjOPQQDAwNpADBmAjEAwk+rg788+u8JL6sdix7l57WTo8E/M+o3TO5x
+uRuPdShrBFm4ArGR2PPs4zCQuKgqAjEAi0TA3PVqAxKpoz+Ps8/054p9WTgDfBFZ
+i/lm2yTaPs0xjY6FNWoy7fsVw5oEKxOn
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGCTCCA/GgAwIBAgIRAOY7gfcBZgR2tqfBzMbFQCUwDQYJKoZIhvcNAQEMBQAw
+gZwxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTE1MDMGA1UEAwws
+QW1hem9uIFJEUyBhcC1zb3V0aGVhc3QtNCBSb290IENBIFJTQTQwOTYgRzExEDAO
+BgNVBAcMB1NlYXR0bGUwIBcNMjIwNTI1MTY1NDU5WhgPMjEyMjA1MjUxNzU0NTla
+MIGcMQswCQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywg
+SW5jLjETMBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExNTAzBgNVBAMM
+LEFtYXpvbiBSRFMgYXAtc291dGhlYXN0LTQgUm9vdCBDQSBSU0E0MDk2IEcxMRAw
+DgYDVQQHDAdTZWF0dGxlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
+lfxER43FuLRdL08bddF0YhbCP+XXKj1A/TFMXmd2My8XDei8rPXFYyyjMig9+xZw
+uAsIxLwz8uiA26CKA8bCZKg5VG2kTeOJAfvBJaLv1CZefs3Z4Uf1Sjvm6MF2yqEj
+GoORfyfL9HiZFTDuF/hcjWoKYCfMuG6M/wO8IbdICrX3n+BiYQJu/pFO660Mg3h/
+8YBBWYDbHoCiH/vkqqJugQ5BM3OI5nsElW51P1icEEqti4AZ7JmtSv9t7fIFBVyR
+oaEyOgpp0sm193F/cDJQdssvjoOnaubsSYm1ep3awZAUyGN/X8MBrPY95d0hLhfH
+Ehc5Icyg+hsosBljlAyksmt4hFQ9iBnWIz/ZTfGMck+6p3HVL9RDgvluez+rWv59
+8q7omUGsiPApy5PDdwI/Wt/KtC34/2sjslIJfvgifdAtkRPkhff1WEwER00ADrN9
+eGGInaCpJfb1Rq8cV2n00jxg7DcEd65VR3dmIRb0bL+jWK62ni/WdEyomAOMfmGj
+aWf78S/4rasHllWJ+QwnaUYY3u6N8Cgio0/ep4i34FxMXqMV3V0/qXdfhyabi/LM
+wCxNo1Dwt+s6OtPJbwO92JL+829QAxydfmaMTeHBsgMPkG7RwAekeuatKGHNsc2Z
+x2Q4C2wVvOGAhcHwxfM8JfZs3nDSZJndtVVnFlUY0UECAwEAAaNCMEAwDwYDVR0T
+AQH/BAUwAwEB/zAdBgNVHQ4EFgQUpnG7mWazy6k97/tb5iduRB3RXgQwDgYDVR0P
+AQH/BAQDAgGGMA0GCSqGSIb3DQEBDAUAA4ICAQCDLqq1Wwa9Tkuv7vxBnIeVvvFF
+ecTn+P+wJxl9Qa2ortzqTHZsBDyJO62d04AgBwiDXkJ9a+bthgG0H1J7Xee8xqv1
+xyX2yKj24ygHjspLotKP4eDMdDi5TYq+gdkbPmm9Q69B1+W6e049JVGXvWG8/7kU
+igxeuCYwtCCdUPRLf6D8y+1XMGgVv3/DSOHWvTg3MJ1wJ3n3+eve3rjGdRYWZeJu
+k21HLSZYzVrCtUsh2YAeLnUbSxVuT2Xr4JehYe9zW5HEQ8Je/OUfnCy9vzoN/ITw
+osAH+EBJQey7RxEDqMwCaRefH0yeHFcnOll0OXg/urnQmwbEYzQ1uutJaBPsjU0J
+Qf06sMxI7GiB5nPE+CnI2sM6A9AW9kvwexGXpNJiLxF8dvPQthpOKGcYu6BFvRmt
+6ctfXd9b7JJoVqMWuf5cCY6ihpk1e9JTlAqu4Eb/7JNyGiGCR40iSLvV28un9wiE
+plrdYxwcNYq851BEu3r3AyYWw/UW1AKJ5tM+/Gtok+AphMC9ywT66o/Kfu44mOWm
+L3nSLSWEcgfUVgrikpnyGbUnGtgCmHiMlUtNVexcE7OtCIZoVAlCGKNu7tyuJf10
+Qlk8oIIzfSIlcbHpOYoN79FkLoDNc2er4Gd+7w1oPQmdAB0jBJnA6t0OUBPKdDdE
+Ufff2jrbfbzECn1ELg==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICrzCCAjWgAwIBAgIQARky6+5PNFRkFVOp3Ob1CTAKBggqhkjOPQQDAzCBlzEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdBbWF6
+b24gUkRTIGV1LXNvdXRoLTIgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwIBcNMjIwNTIzMTg0MTI4WhgPMjEyMjA1MjMxOTQxMjdaMIGXMQswCQYD
+VQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEG
+A1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMDAuBgNVBAMMJ0FtYXpvbiBS
+RFMgZXUtc291dGgtMiBSb290IENBIEVDQzM4NCBHMTEQMA4GA1UEBwwHU2VhdHRs
+ZTB2MBAGByqGSM49AgEGBSuBBAAiA2IABNVGL5oF7cfIBxKyWd2PVK/S5yQfaJY3
+QFHWvEdt6951n9JhiiPrHzfVHsxZp1CBjILRMzjgRbYWmc8qRoLkgGE7htGdwudJ
+Fa/WuKzO574Prv4iZXUnVGTboC7JdvKbh6NCMEAwDwYDVR0TAQH/BAUwAwEB/zAd
+BgNVHQ4EFgQUgDeIIEKynwUbNXApdIPnmRWieZwwDgYDVR0PAQH/BAQDAgGGMAoG
+CCqGSM49BAMDA2gAMGUCMEOOJfucrST+FxuqJkMZyCM3gWGZaB+/w6+XUAJC6hFM
+uSTY0F44/bERkA4XhH+YGAIxAIpJQBakCA1/mXjsTnQ+0El9ty+LODp8ibkn031c
+8DKDS7pR9UK7ZYdR6zFg3ZCjQw==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIID/zCCAuegAwIBAgIRAKeDpqX5WFCGNo94M4v69sUwDQYJKoZIhvcNAQELBQAw
+gZcxCzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJ
+bmMuMRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEwMC4GA1UEAwwn
+QW1hem9uIFJEUyBldS13ZXN0LTMgUm9vdCBDQSBSU0EyMDQ4IEcxMRAwDgYDVQQH
+DAdTZWF0dGxlMCAXDTIxMDUyNTIyMTgzM1oYDzIwNjEwNTI1MjMxODMzWjCBlzEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTAwLgYDVQQDDCdBbWF6
+b24gUkRTIGV1LXdlc3QtMyBSb290IENBIFJTQTIwNDggRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKOTEMTfzvs4H
+WtJR8gI7GXN6xesulWtZPv21oT+fLGwJ+9Bv8ADCGDDrDxfeH/HxJmzG9hgVAzVn
+4g97Bn7q07tGZM5pVi96/aNp11velZT7spOJKfJDZTlGns6DPdHmx48whpdO+dOb
+6+eR0VwCIv+Vl1fWXgoACXYCoKjhxJs+R+fwY//0JJ1YG8yjZ+ghLCJmvlkOJmE1
+TCPUyIENaEONd6T+FHGLVYRRxC2cPO65Jc4yQjsXvvQypoGgx7FwD5voNJnFMdyY
+754JGPOOe/SZdepN7Tz7UEq8kn7NQSbhmCsgA/Hkjkchz96qN/YJ+H/okiQUTNB0
+eG9ogiVFAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFjayw9Y
+MjbxfF14XAhMM2VPl0PfMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOC
+AQEAAtmx6d9+9CWlMoU0JCirtp4dSS41bBfb9Oor6GQ8WIr2LdfZLL6uES/ubJPE
+1Sh5Vu/Zon5/MbqLMVrfniv3UpQIof37jKXsjZJFE1JVD/qQfRzG8AlBkYgHNEiS
+VtD4lFxERmaCkY1tjKB4Dbd5hfhdrDy29618ZjbSP7NwAfnwb96jobCmMKgxVGiH
+UqsLSiEBZ33b2hI7PJ6iTJnYBWGuiDnsWzKRmheA4nxwbmcQSfjbrNwa93w3caL2
+v/4u54Kcasvcu3yFsUwJygt8z43jsGAemNZsS7GWESxVVlW93MJRn6M+MMakkl9L
+tWaXdHZ+KUV7LhfYLb0ajvb40w==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICtDCCAjmgAwIBAgIQenQbcP/Zbj9JxvZ+jXbRnTAKBggqhkjOPQQDAzCBmTEL
+MAkGA1UEBhMCVVMxIjAgBgNVBAoMGUFtYXpvbiBXZWIgU2VydmljZXMsIEluYy4x
+EzARBgNVBAsMCkFtYXpvbiBSRFMxCzAJBgNVBAgMAldBMTIwMAYDVQQDDClBbWF6
+b24gUkRTIGV1LWNlbnRyYWwtMSBSb290IENBIEVDQzM4NCBHMTEQMA4GA1UEBwwH
+U2VhdHRsZTAgFw0yMTA1MjEyMjMzMjRaGA8yMTIxMDUyMTIzMzMyNFowgZkxCzAJ
+BgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMuMRMw
+EQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEyMDAGA1UEAwwpQW1hem9u
+IFJEUyBldS1jZW50cmFsLTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATlBHiEM9LoEb1Hdnd5j2VpCDOU
+5nGuFoBD8ROUCkFLFh5mHrHfPXwBc63heW9WrP3qnDEm+UZEUvW7ROvtWCTPZdLz
+Z4XaqgAlSqeE2VfUyZOZzBSgUUJk7OlznXfkCMOjQjBAMA8GA1UdEwEB/wQFMAMB
+Af8wHQYDVR0OBBYEFDT/ThjQZl42Nv/4Z/7JYaPNMly2MA4GA1UdDwEB/wQEAwIB
+hjAKBggqhkjOPQQDAwNpADBmAjEAnZWmSgpEbmq+oiCa13l5aGmxSlfp9h12Orvw
+Dq/W5cENJz891QD0ufOsic5oGq1JAjEAp5kSJj0MxJBTHQze1Aa9gG4sjHBxXn98
+4MP1VGsQuhfndNHQb4V0Au7OWnOeiobq
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICtDCCAjqgAwIBAgIRAPhVkIsQ51JFhD2kjFK5uAkwCgYIKoZIzj0EAwMwgZkx
+CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu
+MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEyMDAGA1UEAwwpQW1h
+em9uIFJEUyBldS1jZW50cmFsLTIgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcM
+B1NlYXR0bGUwIBcNMjIwNjA2MjEyOTE3WhgPMjEyMjA2MDYyMjI5MTdaMIGZMQsw
+CQYDVQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjET
+MBEGA1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExMjAwBgNVBAMMKUFtYXpv
+biBSRFMgZXUtY2VudHJhbC0yIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdT
+ZWF0dGxlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEA5xnIEBtG5b2nmbj49UEwQza
+yX0844fXjccYzZ8xCDUe9dS2XOUi0aZlGblgSe/3lwjg8fMcKXLObGGQfgIx1+5h
+AIBjORis/dlyN5q/yH4U5sjS8tcR0GDGVHrsRUZCo0IwQDAPBgNVHRMBAf8EBTAD
+AQH/MB0GA1UdDgQWBBRK+lSGutXf4DkTjR3WNfv4+KeNFTAOBgNVHQ8BAf8EBAMC
+AYYwCgYIKoZIzj0EAwMDaAAwZQIxAJ4NxQ1Gerqr70ZrnUqc62Vl8NNqTzInamCG
+Kce3FTsMWbS9qkgrjZkO9QqOcGIw/gIwSLrwUT+PKr9+H9eHyGvpq9/3AIYSnFkb
+Cf3dyWPiLKoAtLFwjzB/CkJlsAS1c8dS
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIICrjCCAjSgAwIBAgIRAL9SdzVPcpq7GOpvdGoM80IwCgYIKoZIzj0EAwMwgZYx
+CzAJBgNVBAYTAlVTMSIwIAYDVQQKDBlBbWF6b24gV2ViIFNlcnZpY2VzLCBJbmMu
+MRMwEQYDVQQLDApBbWF6b24gUkRTMQswCQYDVQQIDAJXQTEvMC0GA1UEAwwmQW1h
+em9uIFJEUyBldS13ZXN0LTEgUm9vdCBDQSBFQ0MzODQgRzExEDAOBgNVBAcMB1Nl
+YXR0bGUwIBcNMjEwNTIwMTY1ODA3WhgPMjEyMTA1MjAxNzU4MDdaMIGWMQswCQYD
+VQQGEwJVUzEiMCAGA1UECgwZQW1hem9uIFdlYiBTZXJ2aWNlcywgSW5jLjETMBEG
+A1UECwwKQW1hem9uIFJEUzELMAkGA1UECAwCV0ExLzAtBgNVBAMMJkFtYXpvbiBS
+RFMgZXUtd2VzdC0xIFJvb3QgQ0EgRUNDMzg0IEcxMRAwDgYDVQQHDAdTZWF0dGxl
+MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEJWDgXebvwjR+Ce+hxKOLbnsfN5W5dOlP
+Zn8kwWnD+SLkU81Eac/BDJsXGrMk6jFD1vg16PEkoSevsuYWlC8xR6FmT6F6pmeh
+fsMGOyJpfK4fyoEPhKeQoT23lFIc5Orjo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0G
+A1UdDgQWBBSVNAN1CHAz0eZ77qz2adeqjm31TzAOBgNVHQ8BAf8EBAMCAYYwCgYI
+KoZIzj0EAwMDaAAwZQIxAMlQeHbcjor49jqmcJ9gRLWdEWpXG8thIf6zfYQ/OEAg
+d7GDh4fR/OUk0VfjsBUN/gIwZB0bGdXvK38s6AAE/9IT051cz/wMe9GIrX1MnL1T
+1F5OqnXJdiwfZRRTHsRQ/L00
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/db/migrate/20140300000000_enable_extension_ossd.rb b/db/migrate/20140300000000_enable_extension_ossd.rb
index 1c8465707..c1408e09c 100644
--- a/db/migrate/20140300000000_enable_extension_ossd.rb
+++ b/db/migrate/20140300000000_enable_extension_ossd.rb
@@ -1,4 +1,4 @@
-class EnableExtensionOssd < ActiveRecord::Migration
+class EnableExtensionOssd < ActiveRecord::Migration[5.0]
   def change
     enable_extension "uuid-ossp"
   end
diff --git a/db/migrate/20140311235111_create_activities.rb b/db/migrate/20140311235111_create_activities.rb
index db93d1e52..933e66123 100644
--- a/db/migrate/20140311235111_create_activities.rb
+++ b/db/migrate/20140311235111_create_activities.rb
@@ -1,4 +1,4 @@
-class CreateActivities < ActiveRecord::Migration
+class CreateActivities < ActiveRecord::Migration[5.0]
   def change
     create_table :activities do |t|
       t.string :description
diff --git a/db/migrate/20140313144408_create_action_pages.rb b/db/migrate/20140313144408_create_action_pages.rb
index 42c353562..5672f55e5 100644
--- a/db/migrate/20140313144408_create_action_pages.rb
+++ b/db/migrate/20140313144408_create_action_pages.rb
@@ -1,4 +1,4 @@
-class CreateActionPages < ActiveRecord::Migration
+class CreateActionPages < ActiveRecord::Migration[5.0]
   def change
     create_table :action_pages do |t|
       t.string :title
diff --git a/db/migrate/20140314020630_devise_create_users.rb b/db/migrate/20140314020630_devise_create_users.rb
index ab71c3d1b..12f29a418 100644
--- a/db/migrate/20140314020630_devise_create_users.rb
+++ b/db/migrate/20140314020630_devise_create_users.rb
@@ -1,4 +1,4 @@
-class DeviseCreateUsers < ActiveRecord::Migration
+class DeviseCreateUsers < ActiveRecord::Migration[5.0]
   def change
     create_table(:users) do |t|
       ## Database authenticatable
diff --git a/db/migrate/20140317070243_add_userid_to_activities.rb b/db/migrate/20140317070243_add_userid_to_activities.rb
index b3b60e2eb..051ad72ce 100644
--- a/db/migrate/20140317070243_add_userid_to_activities.rb
+++ b/db/migrate/20140317070243_add_userid_to_activities.rb
@@ -1,4 +1,4 @@
-class AddUseridToActivities < ActiveRecord::Migration
+class AddUseridToActivities < ActiveRecord::Migration[5.0]
   def change
     add_column :activities, :user_id, :integer
   end
diff --git a/db/migrate/20140317084144_add_action_pageid_to_activities.rb b/db/migrate/20140317084144_add_action_pageid_to_activities.rb
index c57569cf2..56769d63d 100644
--- a/db/migrate/20140317084144_add_action_pageid_to_activities.rb
+++ b/db/migrate/20140317084144_add_action_pageid_to_activities.rb
@@ -1,4 +1,4 @@
-class AddActionPageidToActivities < ActiveRecord::Migration
+class AddActionPageidToActivities < ActiveRecord::Migration[5.0]
   def change
     add_column :activities, :action_page_id, :integer
   end
diff --git a/db/migrate/20140325050528_create_petitions.rb b/db/migrate/20140325050528_create_petitions.rb
index c44dc85e5..c5350323d 100644
--- a/db/migrate/20140325050528_create_petitions.rb
+++ b/db/migrate/20140325050528_create_petitions.rb
@@ -1,4 +1,4 @@
-class CreatePetitions < ActiveRecord::Migration
+class CreatePetitions < ActiveRecord::Migration[5.0]
   def change
     create_table :petitions do |t|
       t.string :title
diff --git a/db/migrate/20140325050602_create_signatures.rb b/db/migrate/20140325050602_create_signatures.rb
index ea6eef268..a6b333ab1 100644
--- a/db/migrate/20140325050602_create_signatures.rb
+++ b/db/migrate/20140325050602_create_signatures.rb
@@ -1,4 +1,4 @@
-class CreateSignatures < ActiveRecord::Migration
+class CreateSignatures < ActiveRecord::Migration[5.0]
   def change
     create_table :signatures do |t|
       t.integer :petition_id
diff --git a/db/migrate/20140327210422_create_featured_action_pages.rb b/db/migrate/20140327210422_create_featured_action_pages.rb
index 967089c57..69f4b90ca 100644
--- a/db/migrate/20140327210422_create_featured_action_pages.rb
+++ b/db/migrate/20140327210422_create_featured_action_pages.rb
@@ -1,4 +1,4 @@
-class CreateFeaturedActionPages < ActiveRecord::Migration
+class CreateFeaturedActionPages < ActiveRecord::Migration[5.0]
   def change
     create_table :featured_action_pages do |t|
       t.integer :action_page_id
diff --git a/db/migrate/20140328161752_add_details_to_user.rb b/db/migrate/20140328161752_add_details_to_user.rb
index d93bbfe44..2d5901725 100644
--- a/db/migrate/20140328161752_add_details_to_user.rb
+++ b/db/migrate/20140328161752_add_details_to_user.rb
@@ -1,4 +1,4 @@
-class AddDetailsToUser < ActiveRecord::Migration
+class AddDetailsToUser < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :first_name, :string
     add_column :users, :last_name, :string
diff --git a/db/migrate/20140402190943_add_fields_to_signatures.rb b/db/migrate/20140402190943_add_fields_to_signatures.rb
index d0fd311d6..4fabb36fb 100644
--- a/db/migrate/20140402190943_add_fields_to_signatures.rb
+++ b/db/migrate/20140402190943_add_fields_to_signatures.rb
@@ -1,4 +1,4 @@
-class AddFieldsToSignatures < ActiveRecord::Migration
+class AddFieldsToSignatures < ActiveRecord::Migration[5.0]
   def change
     add_column :signatures, :first_name, :string
     add_column :signatures, :last_name, :string
diff --git a/db/migrate/20140402192811_add_petition_id_to_action_pages.rb b/db/migrate/20140402192811_add_petition_id_to_action_pages.rb
index 5f6154720..1ec5114ef 100644
--- a/db/migrate/20140402192811_add_petition_id_to_action_pages.rb
+++ b/db/migrate/20140402192811_add_petition_id_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddPetitionIdToActionPages < ActiveRecord::Migration
+class AddPetitionIdToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :petition_id, :integer
   end
diff --git a/db/migrate/20140403002100_add_photo_url_to_action_pages.rb b/db/migrate/20140403002100_add_photo_url_to_action_pages.rb
index 3ed6d3ad8..7052cfcaa 100644
--- a/db/migrate/20140403002100_add_photo_url_to_action_pages.rb
+++ b/db/migrate/20140403002100_add_photo_url_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddPhotoUrlToActionPages < ActiveRecord::Migration
+class AddPhotoUrlToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :photo_url, :string
   end
diff --git a/db/migrate/20140403183138_add_admin_to_users.rb b/db/migrate/20140403183138_add_admin_to_users.rb
index e386d33dd..0e2407641 100644
--- a/db/migrate/20140403183138_add_admin_to_users.rb
+++ b/db/migrate/20140403183138_add_admin_to_users.rb
@@ -1,4 +1,4 @@
-class AddAdminToUsers < ActiveRecord::Migration
+class AddAdminToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :admin, :boolean, default: false
   end
diff --git a/db/migrate/20140404223839_add_fields_for_tools_to_action_pages.rb b/db/migrate/20140404223839_add_fields_for_tools_to_action_pages.rb
index 1f72afa47..82edad478 100644
--- a/db/migrate/20140404223839_add_fields_for_tools_to_action_pages.rb
+++ b/db/migrate/20140404223839_add_fields_for_tools_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddFieldsForToolsToActionPages < ActiveRecord::Migration
+class AddFieldsForToolsToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :enable_call, :boolean, default: false
     add_column :action_pages, :enable_petition, :boolean, default: false
diff --git a/db/migrate/20140409105241_add_slug_to_actionpage.rb b/db/migrate/20140409105241_add_slug_to_actionpage.rb
index d9f5dfda7..a9f8af8e7 100644
--- a/db/migrate/20140409105241_add_slug_to_actionpage.rb
+++ b/db/migrate/20140409105241_add_slug_to_actionpage.rb
@@ -1,4 +1,4 @@
-class AddSlugToActionpage < ActiveRecord::Migration
+class AddSlugToActionpage < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :slug, :string
     add_index :action_pages, :slug
diff --git a/db/migrate/20140409105530_create_friendly_id_slugs.rb b/db/migrate/20140409105530_create_friendly_id_slugs.rb
index 770f62644..c95692d56 100644
--- a/db/migrate/20140409105530_create_friendly_id_slugs.rb
+++ b/db/migrate/20140409105530_create_friendly_id_slugs.rb
@@ -1,4 +1,4 @@
-class CreateFriendlyIdSlugs < ActiveRecord::Migration
+class CreateFriendlyIdSlugs < ActiveRecord::Migration[5.0]
   def change
     create_table :friendly_id_slugs do |t|
       t.string   :slug,           :null => false
diff --git a/db/migrate/20140410025404_add_address_to_signatures.rb b/db/migrate/20140410025404_add_address_to_signatures.rb
index caabbe849..73f73e622 100644
--- a/db/migrate/20140410025404_add_address_to_signatures.rb
+++ b/db/migrate/20140410025404_add_address_to_signatures.rb
@@ -1,4 +1,4 @@
-class AddAddressToSignatures < ActiveRecord::Migration
+class AddAddressToSignatures < ActiveRecord::Migration[5.0]
   def change
     add_column :signatures, :street_address, :string
     add_column :signatures, :city, :string
diff --git a/db/migrate/20140410030958_add_address_to_users.rb b/db/migrate/20140410030958_add_address_to_users.rb
index 5550eacd3..6b8445614 100644
--- a/db/migrate/20140410030958_add_address_to_users.rb
+++ b/db/migrate/20140410030958_add_address_to_users.rb
@@ -1,4 +1,4 @@
-class AddAddressToUsers < ActiveRecord::Migration
+class AddAddressToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :street_address, :string
     add_column :users, :city, :string
diff --git a/db/migrate/20140410033413_add_goal_to_petition.rb b/db/migrate/20140410033413_add_goal_to_petition.rb
index d643d66e7..d2b75bf2b 100644
--- a/db/migrate/20140410033413_add_goal_to_petition.rb
+++ b/db/migrate/20140410033413_add_goal_to_petition.rb
@@ -1,4 +1,4 @@
-class AddGoalToPetition < ActiveRecord::Migration
+class AddGoalToPetition < ActiveRecord::Migration[5.0]
   def change
     add_column :petitions, :goal, :integer
   end
diff --git a/db/migrate/20140416002624_add_anonymous_to_signatures.rb b/db/migrate/20140416002624_add_anonymous_to_signatures.rb
index 9f5283fec..f10f7542e 100644
--- a/db/migrate/20140416002624_add_anonymous_to_signatures.rb
+++ b/db/migrate/20140416002624_add_anonymous_to_signatures.rb
@@ -1,4 +1,4 @@
-class AddAnonymousToSignatures < ActiveRecord::Migration
+class AddAnonymousToSignatures < ActiveRecord::Migration[5.0]
   def change
     add_column :signatures, :anonymous, :boolean, default: false
   end
diff --git a/db/migrate/20140417021005_add_share_message_to_action_pages.rb b/db/migrate/20140417021005_add_share_message_to_action_pages.rb
index fdb328655..51e2a3a16 100644
--- a/db/migrate/20140417021005_add_share_message_to_action_pages.rb
+++ b/db/migrate/20140417021005_add_share_message_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddShareMessageToActionPages < ActiveRecord::Migration
+class AddShareMessageToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :share_message, :string
   end
diff --git a/db/migrate/20140423002336_create_tweets.rb b/db/migrate/20140423002336_create_tweets.rb
index ca50e509e..40a65062d 100644
--- a/db/migrate/20140423002336_create_tweets.rb
+++ b/db/migrate/20140423002336_create_tweets.rb
@@ -1,4 +1,4 @@
-class CreateTweets < ActiveRecord::Migration
+class CreateTweets < ActiveRecord::Migration[5.0]
   def change
     create_table :tweets do |t|
       t.string :target
diff --git a/db/migrate/20140423002432_add_tweets_to_action_pages.rb b/db/migrate/20140423002432_add_tweets_to_action_pages.rb
index aad68f7f1..70a354c98 100644
--- a/db/migrate/20140423002432_add_tweets_to_action_pages.rb
+++ b/db/migrate/20140423002432_add_tweets_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddTweetsToActionPages < ActiveRecord::Migration
+class AddTweetsToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :tweet_id, :integer
   end
diff --git a/db/migrate/20140423202256_add_cta_to_tweet.rb b/db/migrate/20140423202256_add_cta_to_tweet.rb
index 0bf1f7888..78689b5a1 100644
--- a/db/migrate/20140423202256_add_cta_to_tweet.rb
+++ b/db/migrate/20140423202256_add_cta_to_tweet.rb
@@ -1,4 +1,4 @@
-class AddCtaToTweet < ActiveRecord::Migration
+class AddCtaToTweet < ActiveRecord::Migration[5.0]
   def change
     add_column :tweets, :cta, :string
   end
diff --git a/db/migrate/20140424232842_add_bioguide_id_to_tweets.rb b/db/migrate/20140424232842_add_bioguide_id_to_tweets.rb
index f5a556436..3ea14e8f9 100644
--- a/db/migrate/20140424232842_add_bioguide_id_to_tweets.rb
+++ b/db/migrate/20140424232842_add_bioguide_id_to_tweets.rb
@@ -1,4 +1,4 @@
-class AddBioguideIdToTweets < ActiveRecord::Migration
+class AddBioguideIdToTweets < ActiveRecord::Migration[5.0]
   def change
     add_column :tweets, :bioguide_id, :string
   end
diff --git a/db/migrate/20140425215725_add_target_flags_to_tweets.rb b/db/migrate/20140425215725_add_target_flags_to_tweets.rb
index d0c7d99a5..f69dd0c2e 100644
--- a/db/migrate/20140425215725_add_target_flags_to_tweets.rb
+++ b/db/migrate/20140425215725_add_target_flags_to_tweets.rb
@@ -1,4 +1,4 @@
-class AddTargetFlagsToTweets < ActiveRecord::Migration
+class AddTargetFlagsToTweets < ActiveRecord::Migration[5.0]
   def change
     add_column :tweets, :target_house, :boolean, default: true
     add_column :tweets, :target_senate, :boolean, default: true
diff --git a/db/migrate/20140429015127_add_published_to_action_pages.rb b/db/migrate/20140429015127_add_published_to_action_pages.rb
index d819d70bf..a88bec1e9 100644
--- a/db/migrate/20140429015127_add_published_to_action_pages.rb
+++ b/db/migrate/20140429015127_add_published_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddPublishedToActionPages < ActiveRecord::Migration
+class AddPublishedToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :published, :boolean, default: false
   end
diff --git a/db/migrate/20140430110906_add_type_to_activities.rb b/db/migrate/20140430110906_add_type_to_activities.rb
index cdb77ec7b..de7bd3035 100644
--- a/db/migrate/20140430110906_add_type_to_activities.rb
+++ b/db/migrate/20140430110906_add_type_to_activities.rb
@@ -1,4 +1,4 @@
-class AddTypeToActivities < ActiveRecord::Migration
+class AddTypeToActivities < ActiveRecord::Migration[5.0]
   def change
     add_column :activities, :action_type, :string
   end
diff --git a/db/migrate/20140501160413_create_call_tool_configs.rb b/db/migrate/20140501160413_create_call_tool_configs.rb
index d7ba2b483..89c6f8a13 100644
--- a/db/migrate/20140501160413_create_call_tool_configs.rb
+++ b/db/migrate/20140501160413_create_call_tool_configs.rb
@@ -1,4 +1,4 @@
-class CreateCallToolConfigs < ActiveRecord::Migration
+class CreateCallToolConfigs < ActiveRecord::Migration[5.0]
   def change
     create_table :call_tool_configs do |t|
 
diff --git a/db/migrate/20140502162820_add_call_campaign_id_to_action_pages.rb b/db/migrate/20140502162820_add_call_campaign_id_to_action_pages.rb
index ce71b7574..21766002c 100644
--- a/db/migrate/20140502162820_add_call_campaign_id_to_action_pages.rb
+++ b/db/migrate/20140502162820_add_call_campaign_id_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddCallCampaignIdToActionPages < ActiveRecord::Migration
+class AddCallCampaignIdToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :call_campaign_id, :string
   end
diff --git a/db/migrate/20140504080222_add_attachment_featured_image_to_action_pages.rb b/db/migrate/20140504080222_add_attachment_featured_image_to_action_pages.rb
index 0be5afc50..e0050ce68 100644
--- a/db/migrate/20140504080222_add_attachment_featured_image_to_action_pages.rb
+++ b/db/migrate/20140504080222_add_attachment_featured_image_to_action_pages.rb
@@ -1,11 +1,8 @@
-class AddAttachmentFeaturedImageToActionPages < ActiveRecord::Migration
-  def self.up
-    change_table :action_pages do |t|
-      t.attachment :featured_image
-    end
-  end
-
-  def self.down
-    drop_attached_file :action_pages, :featured_image
+class AddAttachmentFeaturedImageToActionPages < ActiveRecord::Migration[5.0]
+  def change
+    add_column :action_pages, :featured_image_file_name, :string
+    add_column :action_pages, :featured_image_content_type, :string
+    add_column :action_pages, :featured_image_file_size, :bigint
+    add_column :action_pages, :featured_image_updated_at, :datetime
   end
 end
diff --git a/db/migrate/20140505142843_add_what_to_say_to_action_pages.rb b/db/migrate/20140505142843_add_what_to_say_to_action_pages.rb
index 048402d09..01841ea42 100644
--- a/db/migrate/20140505142843_add_what_to_say_to_action_pages.rb
+++ b/db/migrate/20140505142843_add_what_to_say_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddWhatToSayToActionPages < ActiveRecord::Migration
+class AddWhatToSayToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :what_to_say, :text
   end
diff --git a/db/migrate/20140506161533_create_email_campaigns.rb b/db/migrate/20140506161533_create_email_campaigns.rb
index 6b2e7465f..330b48089 100644
--- a/db/migrate/20140506161533_create_email_campaigns.rb
+++ b/db/migrate/20140506161533_create_email_campaigns.rb
@@ -1,4 +1,4 @@
-class CreateEmailCampaigns < ActiveRecord::Migration
+class CreateEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     create_table :email_campaigns do |t|
       t.text :message
diff --git a/db/migrate/20140506173759_add_email_campaign_id_to_action_pages.rb b/db/migrate/20140506173759_add_email_campaign_id_to_action_pages.rb
index 50836b0bd..26001649b 100644
--- a/db/migrate/20140506173759_add_email_campaign_id_to_action_pages.rb
+++ b/db/migrate/20140506173759_add_email_campaign_id_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddEmailCampaignIdToActionPages < ActiveRecord::Migration
+class AddEmailCampaignIdToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :email_campaign_id, :integer
   end
diff --git a/db/migrate/20140506214830_create_user_preferences.rb b/db/migrate/20140506214830_create_user_preferences.rb
index 94d602632..34fb70cf1 100644
--- a/db/migrate/20140506214830_create_user_preferences.rb
+++ b/db/migrate/20140506214830_create_user_preferences.rb
@@ -1,4 +1,4 @@
-class CreateUserPreferences < ActiveRecord::Migration
+class CreateUserPreferences < ActiveRecord::Migration[5.0]
   def change
     create_table :user_preferences do |t|
       t.integer :user_id, null: false
diff --git a/db/migrate/20140507002622_create_tweet_targets.rb b/db/migrate/20140507002622_create_tweet_targets.rb
index ae4a5056b..bd52f1db5 100644
--- a/db/migrate/20140507002622_create_tweet_targets.rb
+++ b/db/migrate/20140507002622_create_tweet_targets.rb
@@ -1,4 +1,4 @@
-class CreateTweetTargets < ActiveRecord::Migration
+class CreateTweetTargets < ActiveRecord::Migration[5.0]
   def change
     create_table :tweet_targets do |t|
       t.integer :tweet_id, null: false
diff --git a/db/migrate/20140508122428_fix_column_name.rb b/db/migrate/20140508122428_fix_column_name.rb
index 1d69d81cd..a8765ef96 100644
--- a/db/migrate/20140508122428_fix_column_name.rb
+++ b/db/migrate/20140508122428_fix_column_name.rb
@@ -1,4 +1,4 @@
-class FixColumnName < ActiveRecord::Migration
+class FixColumnName < ActiveRecord::Migration[5.0]
   def change
     rename_column :action_pages, :email_campaign_id, :email_campaigns_id
   end
diff --git a/db/migrate/20140509130356_add_subject_to_email_campaigns.rb b/db/migrate/20140509130356_add_subject_to_email_campaigns.rb
index 7d7d897bc..4432031e5 100644
--- a/db/migrate/20140509130356_add_subject_to_email_campaigns.rb
+++ b/db/migrate/20140509130356_add_subject_to_email_campaigns.rb
@@ -1,4 +1,4 @@
-class AddSubjectToEmailCampaigns < ActiveRecord::Migration
+class AddSubjectToEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :subject, :string
   end
diff --git a/db/migrate/20140509200631_rename_column_enable_share_to_enable_tweet_on_action_pages.rb b/db/migrate/20140509200631_rename_column_enable_share_to_enable_tweet_on_action_pages.rb
index c1dffa460..5cbd836a7 100644
--- a/db/migrate/20140509200631_rename_column_enable_share_to_enable_tweet_on_action_pages.rb
+++ b/db/migrate/20140509200631_rename_column_enable_share_to_enable_tweet_on_action_pages.rb
@@ -1,4 +1,4 @@
-class RenameColumnEnableShareToEnableTweetOnActionPages < ActiveRecord::Migration
+class RenameColumnEnableShareToEnableTweetOnActionPages < ActiveRecord::Migration[5.0]
   def change
     change_table :action_pages do |t|
       t.rename :enable_share, :enable_tweet
diff --git a/db/migrate/20140513164825_create_call_campaigns.rb b/db/migrate/20140513164825_create_call_campaigns.rb
index 48c736543..9fbd261a5 100644
--- a/db/migrate/20140513164825_create_call_campaigns.rb
+++ b/db/migrate/20140513164825_create_call_campaigns.rb
@@ -1,4 +1,4 @@
-class CreateCallCampaigns < ActiveRecord::Migration
+class CreateCallCampaigns < ActiveRecord::Migration[5.0]
   def change
     create_table :call_campaigns do |t|
 
diff --git a/db/migrate/20140513165018_change_call_campaign_id.rb b/db/migrate/20140513165018_change_call_campaign_id.rb
index 327c2a253..491e723a7 100644
--- a/db/migrate/20140513165018_change_call_campaign_id.rb
+++ b/db/migrate/20140513165018_change_call_campaign_id.rb
@@ -1,4 +1,4 @@
-class ChangeCallCampaignId < ActiveRecord::Migration
+class ChangeCallCampaignId < ActiveRecord::Migration[5.0]
   def change
     remove_column :action_pages, :call_campaign_id
     add_column :action_pages, :call_campaign_id, :integer  
diff --git a/db/migrate/20140513170430_add_data_to_call_campaign.rb b/db/migrate/20140513170430_add_data_to_call_campaign.rb
index 67c7eb59e..36ccda399 100644
--- a/db/migrate/20140513170430_add_data_to_call_campaign.rb
+++ b/db/migrate/20140513170430_add_data_to_call_campaign.rb
@@ -1,4 +1,4 @@
-class AddDataToCallCampaign < ActiveRecord::Migration
+class AddDataToCallCampaign < ActiveRecord::Migration[5.0]
   def change
     add_column :call_campaigns, :title, :string
     add_column :call_campaigns, :message, :text
diff --git a/db/migrate/20140513211548_add_phone_to_users.rb b/db/migrate/20140513211548_add_phone_to_users.rb
index 7f94bae93..75ff77b1d 100644
--- a/db/migrate/20140513211548_add_phone_to_users.rb
+++ b/db/migrate/20140513211548_add_phone_to_users.rb
@@ -1,4 +1,4 @@
-class AddPhoneToUsers < ActiveRecord::Migration
+class AddPhoneToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :phone, :string
   end
diff --git a/db/migrate/20140514191109_add_summary_to_action_pages.rb b/db/migrate/20140514191109_add_summary_to_action_pages.rb
index 20b873e51..5587bd0b7 100644
--- a/db/migrate/20140514191109_add_summary_to_action_pages.rb
+++ b/db/migrate/20140514191109_add_summary_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddSummaryToActionPages < ActiveRecord::Migration
+class AddSummaryToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :summary, :string
   end
diff --git a/db/migrate/20140515192334_add_attachment_background_image_to_action_pages.rb b/db/migrate/20140515192334_add_attachment_background_image_to_action_pages.rb
index 76b7505f9..f101087c6 100644
--- a/db/migrate/20140515192334_add_attachment_background_image_to_action_pages.rb
+++ b/db/migrate/20140515192334_add_attachment_background_image_to_action_pages.rb
@@ -1,11 +1,9 @@
-class AddAttachmentBackgroundImageToActionPages < ActiveRecord::Migration
-  def self.up
-    change_table :action_pages do |t|
-      t.attachment :background_image
-    end
-  end
-
-  def self.down
-    drop_attached_file :action_pages, :background_image
+# todo: ??
+class AddAttachmentBackgroundImageToActionPages < ActiveRecord::Migration[5.0]
+  def change
+    add_column :action_pages, :background_image_file_name, :string
+    add_column :action_pages, :background_image_content_type, :string
+    add_column :action_pages, :background_image_file_size, :bigint
+    add_column :action_pages, :background_image_updated_at, :datetime
   end
 end
diff --git a/db/migrate/20140515204831_add_template_and_layout_to_action_pages.rb b/db/migrate/20140515204831_add_template_and_layout_to_action_pages.rb
index fcac78b93..ec78584cd 100644
--- a/db/migrate/20140515204831_add_template_and_layout_to_action_pages.rb
+++ b/db/migrate/20140515204831_add_template_and_layout_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddTemplateAndLayoutToActionPages < ActiveRecord::Migration
+class AddTemplateAndLayoutToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :template, :string
     add_column :action_pages, :layout, :string
diff --git a/db/migrate/20140522234821_add_activity_option_to_users.rb b/db/migrate/20140522234821_add_activity_option_to_users.rb
index db391750d..1026c3286 100644
--- a/db/migrate/20140522234821_add_activity_option_to_users.rb
+++ b/db/migrate/20140522234821_add_activity_option_to_users.rb
@@ -1,4 +1,4 @@
-class AddActivityOptionToUsers < ActiveRecord::Migration
+class AddActivityOptionToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :record_activity, :boolean, default: true
   end
diff --git a/db/migrate/20140529051541_add_confirmable_to_devise.rb b/db/migrate/20140529051541_add_confirmable_to_devise.rb
index 29224d69e..9fe852a38 100644
--- a/db/migrate/20140529051541_add_confirmable_to_devise.rb
+++ b/db/migrate/20140529051541_add_confirmable_to_devise.rb
@@ -1,4 +1,4 @@
-class AddConfirmableToDevise < ActiveRecord::Migration
+class AddConfirmableToDevise < ActiveRecord::Migration[5.0]
   # Note: You can't use change, as User.update_all with fail in the down migration
   def self.up
     add_column :users, :confirmation_token, :string
diff --git a/db/migrate/20140529215543_add_og_title_to_action_pages.rb b/db/migrate/20140529215543_add_og_title_to_action_pages.rb
index e72016958..d39bbcdb4 100644
--- a/db/migrate/20140529215543_add_og_title_to_action_pages.rb
+++ b/db/migrate/20140529215543_add_og_title_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddOgTitleToActionPages < ActiveRecord::Migration
+class AddOgTitleToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :og_title, :string
   end
diff --git a/db/migrate/20140529220025_add_og_image_to_action_pages.rb b/db/migrate/20140529220025_add_og_image_to_action_pages.rb
index 9f89fdca7..9cf386113 100644
--- a/db/migrate/20140529220025_add_og_image_to_action_pages.rb
+++ b/db/migrate/20140529220025_add_og_image_to_action_pages.rb
@@ -1,11 +1,8 @@
-class AddOgImageToActionPages < ActiveRecord::Migration
-  def self.up
-    change_table :action_pages do |t|
-      t.attachment :og_image
-    end
-  end
-
-  def self.down
-    drop_attached_file :action_pages, :og_image
+class AddOgImageToActionPages < ActiveRecord::Migration[5.0]
+  def change
+    add_column :action_pages, :og_image_file_name, :string
+    add_column :action_pages, :og_image_content_type, :string
+    add_column :action_pages, :og_image_file_size, :bigint
+    add_column :action_pages, :og_image_updated_at, :datetime
   end
 end
diff --git a/db/migrate/20140530232720_add_targets_to_email_campaigns.rb b/db/migrate/20140530232720_add_targets_to_email_campaigns.rb
index 87fa99074..0b6349be8 100644
--- a/db/migrate/20140530232720_add_targets_to_email_campaigns.rb
+++ b/db/migrate/20140530232720_add_targets_to_email_campaigns.rb
@@ -1,4 +1,4 @@
-class AddTargetsToEmailCampaigns < ActiveRecord::Migration
+class AddTargetsToEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :target_house, :boolean, default: true
     add_column :email_campaigns, :target_senate, :boolean, default: true
diff --git a/db/migrate/20140531140633_create_source_files.rb b/db/migrate/20140531140633_create_source_files.rb
index ca47a1cce..4c3b3989d 100644
--- a/db/migrate/20140531140633_create_source_files.rb
+++ b/db/migrate/20140531140633_create_source_files.rb
@@ -1,4 +1,4 @@
-class CreateSourceFiles < ActiveRecord::Migration
+class CreateSourceFiles < ActiveRecord::Migration[5.0]
   def change
     create_table :source_files do |t|
       t.string :file_name
diff --git a/db/migrate/20140602020057_change_summary_to_text_blog.rb b/db/migrate/20140602020057_change_summary_to_text_blog.rb
index 45f099011..63026cdcd 100644
--- a/db/migrate/20140602020057_change_summary_to_text_blog.rb
+++ b/db/migrate/20140602020057_change_summary_to_text_blog.rb
@@ -1,4 +1,4 @@
-class ChangeSummaryToTextBlog < ActiveRecord::Migration
+class ChangeSummaryToTextBlog < ActiveRecord::Migration[5.0]
   def change
     change_column :action_pages, :summary, :text, :limit => nil
   end
diff --git a/db/migrate/20140602041107_add_enable_redirect_to_action_pages.rb b/db/migrate/20140602041107_add_enable_redirect_to_action_pages.rb
index c1c519b96..14f3a41b4 100644
--- a/db/migrate/20140602041107_add_enable_redirect_to_action_pages.rb
+++ b/db/migrate/20140602041107_add_enable_redirect_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddEnableRedirectToActionPages < ActiveRecord::Migration
+class AddEnableRedirectToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :enable_redirect, :boolean, :default=>false
   end
diff --git a/db/migrate/20140602041535_add_redirect_url_to_action_pages.rb b/db/migrate/20140602041535_add_redirect_url_to_action_pages.rb
index 22f94159e..706e56503 100644
--- a/db/migrate/20140602041535_add_redirect_url_to_action_pages.rb
+++ b/db/migrate/20140602041535_add_redirect_url_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddRedirectUrlToActionPages < ActiveRecord::Migration
+class AddRedirectUrlToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :redirect_url, :string
   end
diff --git a/db/migrate/20140611015322_add_email_text_to_action_pages.rb b/db/migrate/20140611015322_add_email_text_to_action_pages.rb
index e22cad80d..2ccaf7c6a 100644
--- a/db/migrate/20140611015322_add_email_text_to_action_pages.rb
+++ b/db/migrate/20140611015322_add_email_text_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddEmailTextToActionPages < ActiveRecord::Migration
+class AddEmailTextToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :email_text, :string
   end
diff --git a/db/migrate/20140611030851_change_email_text_to_text.rb b/db/migrate/20140611030851_change_email_text_to_text.rb
index c855d9c31..3017fcfc7 100644
--- a/db/migrate/20140611030851_change_email_text_to_text.rb
+++ b/db/migrate/20140611030851_change_email_text_to_text.rb
@@ -1,4 +1,4 @@
-class ChangeEmailTextToText < ActiveRecord::Migration
+class ChangeEmailTextToText < ActiveRecord::Migration[5.0]
   def up
     change_column :action_pages, :email_text, :text
   end
diff --git a/db/migrate/20140611190909_add_missing_indexes.rb b/db/migrate/20140611190909_add_missing_indexes.rb
index 308a51ef7..aef068567 100644
--- a/db/migrate/20140611190909_add_missing_indexes.rb
+++ b/db/migrate/20140611190909_add_missing_indexes.rb
@@ -1,4 +1,4 @@
-class AddMissingIndexes < ActiveRecord::Migration
+class AddMissingIndexes < ActiveRecord::Migration[5.0]
   def change
     add_index :activities, :user_id
     add_index :activities, :action_page_id
diff --git a/db/migrate/20140613203758_add_contact_id_to_users.rb b/db/migrate/20140613203758_add_contact_id_to_users.rb
index b7c5a441d..481d55bb9 100644
--- a/db/migrate/20140613203758_add_contact_id_to_users.rb
+++ b/db/migrate/20140613203758_add_contact_id_to_users.rb
@@ -1,4 +1,4 @@
-class AddContactIdToUsers < ActiveRecord::Migration
+class AddContactIdToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :contact_id, :integer
   end
diff --git a/db/migrate/20140616203409_add_subscribe_to_users.rb b/db/migrate/20140616203409_add_subscribe_to_users.rb
index a0c54fc61..2d85249ad 100644
--- a/db/migrate/20140616203409_add_subscribe_to_users.rb
+++ b/db/migrate/20140616203409_add_subscribe_to_users.rb
@@ -1,4 +1,4 @@
-class AddSubscribeToUsers < ActiveRecord::Migration
+class AddSubscribeToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :subscribe, :boolean, default: true
   end
diff --git a/db/migrate/20140623235101_create_partners.rb b/db/migrate/20140623235101_create_partners.rb
index 3b30d8bb7..0fa765704 100644
--- a/db/migrate/20140623235101_create_partners.rb
+++ b/db/migrate/20140623235101_create_partners.rb
@@ -1,4 +1,4 @@
-class CreatePartners < ActiveRecord::Migration
+class CreatePartners < ActiveRecord::Migration[5.0]
   def change
     create_table :partners do |t|
       t.string :code
diff --git a/db/migrate/20140624000606_create_subscriptions.rb b/db/migrate/20140624000606_create_subscriptions.rb
index 1d084af7e..ceb4f53de 100644
--- a/db/migrate/20140624000606_create_subscriptions.rb
+++ b/db/migrate/20140624000606_create_subscriptions.rb
@@ -1,4 +1,4 @@
-class CreateSubscriptions < ActiveRecord::Migration
+class CreateSubscriptions < ActiveRecord::Migration[5.0]
   def change
     create_table :subscriptions do |t|
       t.string :first_name
diff --git a/db/migrate/20140626191214_add_image_to_tweet_targets.rb b/db/migrate/20140626191214_add_image_to_tweet_targets.rb
index 0cf96d489..337e9b232 100644
--- a/db/migrate/20140626191214_add_image_to_tweet_targets.rb
+++ b/db/migrate/20140626191214_add_image_to_tweet_targets.rb
@@ -1,4 +1,4 @@
-class AddImageToTweetTargets < ActiveRecord::Migration
+class AddImageToTweetTargets < ActiveRecord::Migration[5.0]
   def self.up
     add_attachment :tweet_targets, :image
   end
diff --git a/db/migrate/20140702113432_create_visits.rb b/db/migrate/20140702113432_create_visits.rb
index 4da9a5a23..36d52cf09 100644
--- a/db/migrate/20140702113432_create_visits.rb
+++ b/db/migrate/20140702113432_create_visits.rb
@@ -1,4 +1,4 @@
-class CreateVisits < ActiveRecord::Migration
+class CreateVisits < ActiveRecord::Migration[5.0]
   def change
     create_table :visits, id: false do |t|
       t.uuid :id, primary_key: true, default: 'uuid_generate_v4()'
diff --git a/db/migrate/20140702113433_create_ahoy_events.rb b/db/migrate/20140702113433_create_ahoy_events.rb
index c488dbfcf..946b18910 100644
--- a/db/migrate/20140702113433_create_ahoy_events.rb
+++ b/db/migrate/20140702113433_create_ahoy_events.rb
@@ -1,4 +1,4 @@
-class CreateAhoyEvents < ActiveRecord::Migration
+class CreateAhoyEvents < ActiveRecord::Migration[5.0]
   def change
     create_table :ahoy_events, id: false do |t|
       t.uuid :id, primary_key: true, default: 'uuid_generate_v4()'
diff --git a/db/migrate/20140703200958_add_victory_to_action_pages.rb b/db/migrate/20140703200958_add_victory_to_action_pages.rb
index a7e686562..e859b60d6 100644
--- a/db/migrate/20140703200958_add_victory_to_action_pages.rb
+++ b/db/migrate/20140703200958_add_victory_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddVictoryToActionPages < ActiveRecord::Migration
+class AddVictoryToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :victory, :boolean, default: false
     add_column :action_pages, :victory_message, :text
diff --git a/db/migrate/20140703211713_add_parnters_to_users.rb b/db/migrate/20140703211713_add_parnters_to_users.rb
index ca1e5d0e0..0ff4ae3c1 100644
--- a/db/migrate/20140703211713_add_parnters_to_users.rb
+++ b/db/migrate/20140703211713_add_parnters_to_users.rb
@@ -1,4 +1,4 @@
-class AddParntersToUsers < ActiveRecord::Migration
+class AddParntersToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :partner_id, :integer
   end
diff --git a/db/migrate/20140805020122_add_unconfirmed_email_to_users.rb b/db/migrate/20140805020122_add_unconfirmed_email_to_users.rb
index 6dcb7eea1..95c3b05d0 100644
--- a/db/migrate/20140805020122_add_unconfirmed_email_to_users.rb
+++ b/db/migrate/20140805020122_add_unconfirmed_email_to_users.rb
@@ -1,4 +1,4 @@
-class AddUnconfirmedEmailToUsers < ActiveRecord::Migration
+class AddUnconfirmedEmailToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :unconfirmed_email, :string
   end
diff --git a/db/migrate/20140808233806_create_topic_category.rb b/db/migrate/20140808233806_create_topic_category.rb
index 2a7e4c477..fa84e4a3a 100644
--- a/db/migrate/20140808233806_create_topic_category.rb
+++ b/db/migrate/20140808233806_create_topic_category.rb
@@ -1,4 +1,4 @@
-class CreateTopicCategory < ActiveRecord::Migration
+class CreateTopicCategory < ActiveRecord::Migration[5.0]
   def change
     create_table :topic_categories do |t|
       t.string :name
diff --git a/db/migrate/20140808233946_create_topic_set.rb b/db/migrate/20140808233946_create_topic_set.rb
index 79a9e645f..df6e04373 100644
--- a/db/migrate/20140808233946_create_topic_set.rb
+++ b/db/migrate/20140808233946_create_topic_set.rb
@@ -1,4 +1,4 @@
-class CreateTopicSet < ActiveRecord::Migration
+class CreateTopicSet < ActiveRecord::Migration[5.0]
   def change
     create_table :topic_sets do |t|
       t.integer :tier
diff --git a/db/migrate/20140808234311_create_topic.rb b/db/migrate/20140808234311_create_topic.rb
index 5eec51d22..4bcd2ec2e 100644
--- a/db/migrate/20140808234311_create_topic.rb
+++ b/db/migrate/20140808234311_create_topic.rb
@@ -1,4 +1,4 @@
-class CreateTopic < ActiveRecord::Migration
+class CreateTopic < ActiveRecord::Migration[5.0]
   def change
     create_table :topics do |t|
       t.string :name
diff --git a/db/migrate/20140811233646_rename_action_pages_email_campaigns_id.rb b/db/migrate/20140811233646_rename_action_pages_email_campaigns_id.rb
index 65c515ff0..ee08cf685 100644
--- a/db/migrate/20140811233646_rename_action_pages_email_campaigns_id.rb
+++ b/db/migrate/20140811233646_rename_action_pages_email_campaigns_id.rb
@@ -1,4 +1,4 @@
-class RenameActionPagesEmailCampaignsId < ActiveRecord::Migration
+class RenameActionPagesEmailCampaignsId < ActiveRecord::Migration[5.0]
   def change
     rename_column :action_pages, :email_campaigns_id, :email_campaign_id
   end
diff --git a/db/migrate/20140819182202_add_topic_category_id_to_email_campaigns.rb b/db/migrate/20140819182202_add_topic_category_id_to_email_campaigns.rb
index ea4a5d6c5..978a81302 100644
--- a/db/migrate/20140819182202_add_topic_category_id_to_email_campaigns.rb
+++ b/db/migrate/20140819182202_add_topic_category_id_to_email_campaigns.rb
@@ -1,4 +1,4 @@
-class AddTopicCategoryIdToEmailCampaigns < ActiveRecord::Migration
+class AddTopicCategoryIdToEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :topic_category_id, :integer
   end
diff --git a/db/migrate/20140820002514_add_action_page_id_to_ahoy_events.rb b/db/migrate/20140820002514_add_action_page_id_to_ahoy_events.rb
index 296f64584..0368f082d 100644
--- a/db/migrate/20140820002514_add_action_page_id_to_ahoy_events.rb
+++ b/db/migrate/20140820002514_add_action_page_id_to_ahoy_events.rb
@@ -1,4 +1,4 @@
-class AddActionPageIdToAhoyEvents < ActiveRecord::Migration
+class AddActionPageIdToAhoyEvents < ActiveRecord::Migration[5.0]
   def change
     add_column :ahoy_events, :action_page_id, :integer
   end
diff --git a/db/migrate/20140820021820_add_index_on_action_page_id_to_events.rb b/db/migrate/20140820021820_add_index_on_action_page_id_to_events.rb
index b8c4975fd..0f4472515 100644
--- a/db/migrate/20140820021820_add_index_on_action_page_id_to_events.rb
+++ b/db/migrate/20140820021820_add_index_on_action_page_id_to_events.rb
@@ -1,4 +1,4 @@
-class AddIndexOnActionPageIdToEvents < ActiveRecord::Migration
+class AddIndexOnActionPageIdToEvents < ActiveRecord::Migration[5.0]
   def change
     add_index :ahoy_events, :action_page_id
   end
diff --git a/db/migrate/20140820223448_create_congress_scorecards.rb b/db/migrate/20140820223448_create_congress_scorecards.rb
index 02c8f3e8a..69e302d06 100644
--- a/db/migrate/20140820223448_create_congress_scorecards.rb
+++ b/db/migrate/20140820223448_create_congress_scorecards.rb
@@ -1,4 +1,4 @@
-class CreateCongressScorecards < ActiveRecord::Migration
+class CreateCongressScorecards < ActiveRecord::Migration[5.0]
   def change
     create_table :congress_scorecards do |t|
       t.string :bioguide_id, required: true
diff --git a/db/migrate/20140905205137_add_partner_id_to_action_pages.rb b/db/migrate/20140905205137_add_partner_id_to_action_pages.rb
index e982c3a22..f18eca026 100644
--- a/db/migrate/20140905205137_add_partner_id_to_action_pages.rb
+++ b/db/migrate/20140905205137_add_partner_id_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddPartnerIdToActionPages < ActiveRecord::Migration
+class AddPartnerIdToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :partner_id, :integer
   end
diff --git a/db/migrate/20140911224314_add_campaign_tag_to_email_campaigns.rb b/db/migrate/20140911224314_add_campaign_tag_to_email_campaigns.rb
index 375f86c2d..adb677083 100644
--- a/db/migrate/20140911224314_add_campaign_tag_to_email_campaigns.rb
+++ b/db/migrate/20140911224314_add_campaign_tag_to_email_campaigns.rb
@@ -1,4 +1,4 @@
-class AddCampaignTagToEmailCampaigns < ActiveRecord::Migration
+class AddCampaignTagToEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :campaign_tag, :string
   end
diff --git a/db/migrate/20140922235029_add_archived_to_action_pages.rb b/db/migrate/20140922235029_add_archived_to_action_pages.rb
index 326bf5af1..7eb6090ed 100644
--- a/db/migrate/20140922235029_add_archived_to_action_pages.rb
+++ b/db/migrate/20140922235029_add_archived_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddArchivedToActionPages < ActiveRecord::Migration
+class AddArchivedToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :archived, :boolean, default: false
     add_column :action_pages, :redirect_action_page_id, :integer
diff --git a/db/migrate/20140924174611_add_deleted_at_to_partners.rb b/db/migrate/20140924174611_add_deleted_at_to_partners.rb
index 306531c00..4e4f2d6b0 100644
--- a/db/migrate/20140924174611_add_deleted_at_to_partners.rb
+++ b/db/migrate/20140924174611_add_deleted_at_to_partners.rb
@@ -1,4 +1,4 @@
-class AddDeletedAtToPartners < ActiveRecord::Migration
+class AddDeletedAtToPartners < ActiveRecord::Migration[5.0]
   def change
     add_column :partners, :deleted_at, :time
   end
diff --git a/db/migrate/20140930223312_rename_redirect_action_page_id.rb b/db/migrate/20140930223312_rename_redirect_action_page_id.rb
index cb6fd9b54..91d08d8e2 100644
--- a/db/migrate/20140930223312_rename_redirect_action_page_id.rb
+++ b/db/migrate/20140930223312_rename_redirect_action_page_id.rb
@@ -1,4 +1,4 @@
-class RenameRedirectActionPageId < ActiveRecord::Migration
+class RenameRedirectActionPageId < ActiveRecord::Migration[5.0]
   def change
   	rename_column :action_pages, :redirect_action_page_id, :archived_redirect_action_page_id
   end
diff --git a/db/migrate/20141006223048_remove_activities_table.rb b/db/migrate/20141006223048_remove_activities_table.rb
index 40a65eadf..89065b2f1 100644
--- a/db/migrate/20141006223048_remove_activities_table.rb
+++ b/db/migrate/20141006223048_remove_activities_table.rb
@@ -1,4 +1,4 @@
-class RemoveActivitiesTable < ActiveRecord::Migration
+class RemoveActivitiesTable < ActiveRecord::Migration[5.0]
   def change
     drop_table :activities
   end
diff --git a/db/migrate/20141009185436_add_email_addresses_and_target_email_to_email_campaigns.rb b/db/migrate/20141009185436_add_email_addresses_and_target_email_to_email_campaigns.rb
index 10795ed67..bc15cea17 100644
--- a/db/migrate/20141009185436_add_email_addresses_and_target_email_to_email_campaigns.rb
+++ b/db/migrate/20141009185436_add_email_addresses_and_target_email_to_email_campaigns.rb
@@ -1,4 +1,4 @@
-class AddEmailAddressesAndTargetEmailToEmailCampaigns < ActiveRecord::Migration
+class AddEmailAddressesAndTargetEmailToEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :email_addresses, :string
     add_column :email_campaigns, :target_email, :boolean
diff --git a/db/migrate/20150108212457_add_target_bioguide_id_to_email_campaigns.rb b/db/migrate/20150108212457_add_target_bioguide_id_to_email_campaigns.rb
index f7ca45b83..a765ba756 100644
--- a/db/migrate/20150108212457_add_target_bioguide_id_to_email_campaigns.rb
+++ b/db/migrate/20150108212457_add_target_bioguide_id_to_email_campaigns.rb
@@ -1,4 +1,4 @@
-class AddTargetBioguideIdToEmailCampaigns < ActiveRecord::Migration
+class AddTargetBioguideIdToEmailCampaigns < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :target_bioguide_id, :boolean, default: false
     add_column :email_campaigns, :bioguide_id, :string
diff --git a/db/migrate/20150110042803_add_alt_text_fields_to_email_campaign.rb b/db/migrate/20150110042803_add_alt_text_fields_to_email_campaign.rb
index 1dc4cb5a2..b0a379d67 100644
--- a/db/migrate/20150110042803_add_alt_text_fields_to_email_campaign.rb
+++ b/db/migrate/20150110042803_add_alt_text_fields_to_email_campaign.rb
@@ -1,4 +1,4 @@
-class AddAltTextFieldsToEmailCampaign < ActiveRecord::Migration
+class AddAltTextFieldsToEmailCampaign < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :alt_text_email_your_rep, :string
     add_column :email_campaigns, :alt_text_look_up_your_rep, :string
diff --git a/db/migrate/20150113014921_add_more_alt_text_fields_to_email_campaign.rb b/db/migrate/20150113014921_add_more_alt_text_fields_to_email_campaign.rb
index 293621dae..57bafbf3a 100644
--- a/db/migrate/20150113014921_add_more_alt_text_fields_to_email_campaign.rb
+++ b/db/migrate/20150113014921_add_more_alt_text_fields_to_email_campaign.rb
@@ -1,4 +1,4 @@
-class AddMoreAltTextFieldsToEmailCampaign < ActiveRecord::Migration
+class AddMoreAltTextFieldsToEmailCampaign < ActiveRecord::Migration[5.0]
   def change
     add_column :email_campaigns, :alt_text_look_up_helper, :string
     add_column :email_campaigns, :alt_text_customize_message_helper, :string
diff --git a/db/migrate/20150123194715_create_delayed_jobs.rb b/db/migrate/20150123194715_create_delayed_jobs.rb
index 27fdcf6cc..130a8d570 100644
--- a/db/migrate/20150123194715_create_delayed_jobs.rb
+++ b/db/migrate/20150123194715_create_delayed_jobs.rb
@@ -1,4 +1,4 @@
-class CreateDelayedJobs < ActiveRecord::Migration
+class CreateDelayedJobs < ActiveRecord::Migration[5.0]
   def self.up
     create_table :delayed_jobs, force: true do |table|
       table.integer :priority, default: 0, null: false # Allows some jobs to jump to the front of the queue
diff --git a/db/migrate/20150625230944_create_bounces.rb b/db/migrate/20150625230944_create_bounces.rb
index e1aeb1995..f5f86ab65 100644
--- a/db/migrate/20150625230944_create_bounces.rb
+++ b/db/migrate/20150625230944_create_bounces.rb
@@ -1,4 +1,4 @@
-class CreateBounces < ActiveRecord::Migration
+class CreateBounces < ActiveRecord::Migration[5.0]
   def change
     create_table :bounces do |t|
       t.string :email
diff --git a/db/migrate/20151026192811_add_lockable_to_users.rb b/db/migrate/20151026192811_add_lockable_to_users.rb
index f1f006645..fb71adba6 100644
--- a/db/migrate/20151026192811_add_lockable_to_users.rb
+++ b/db/migrate/20151026192811_add_lockable_to_users.rb
@@ -1,4 +1,4 @@
-class AddLockableToUsers < ActiveRecord::Migration
+class AddLockableToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :failed_attempts, :integer, default: 0
     add_column :users, :unlock_token, :string
diff --git a/db/migrate/20151211200545_remove_call_tool_configs.rb b/db/migrate/20151211200545_remove_call_tool_configs.rb
index 0d8c7e77e..f9bb30999 100644
--- a/db/migrate/20151211200545_remove_call_tool_configs.rb
+++ b/db/migrate/20151211200545_remove_call_tool_configs.rb
@@ -1,4 +1,4 @@
-class RemoveCallToolConfigs < ActiveRecord::Migration
+class RemoveCallToolConfigs < ActiveRecord::Migration[5.0]
   def change
     drop_table :call_tool_configs
   end
diff --git a/db/migrate/20151212031318_add_password_expired_to_users.rb b/db/migrate/20151212031318_add_password_expired_to_users.rb
index 7dd6e8f63..3a01ee3a2 100644
--- a/db/migrate/20151212031318_add_password_expired_to_users.rb
+++ b/db/migrate/20151212031318_add_password_expired_to_users.rb
@@ -1,4 +1,4 @@
-class AddPasswordExpiredToUsers < ActiveRecord::Migration
+class AddPasswordExpiredToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :password_expired, :boolean
   end
diff --git a/db/migrate/20160107220954_remove_url_from_source_files.rb b/db/migrate/20160107220954_remove_url_from_source_files.rb
index 187bc2c19..410a3ea28 100644
--- a/db/migrate/20160107220954_remove_url_from_source_files.rb
+++ b/db/migrate/20160107220954_remove_url_from_source_files.rb
@@ -1,4 +1,4 @@
-class RemoveUrlFromSourceFiles < ActiveRecord::Migration
+class RemoveUrlFromSourceFiles < ActiveRecord::Migration[5.0]
   def change
     remove_column :source_files, :url, :string
   end
diff --git a/db/migrate/20160520212818_add_show_all_signatures_to_petition.rb b/db/migrate/20160520212818_add_show_all_signatures_to_petition.rb
index aebeeffdf..705e312ca 100644
--- a/db/migrate/20160520212818_add_show_all_signatures_to_petition.rb
+++ b/db/migrate/20160520212818_add_show_all_signatures_to_petition.rb
@@ -1,4 +1,4 @@
-class AddShowAllSignaturesToPetition < ActiveRecord::Migration
+class AddShowAllSignaturesToPetition < ActiveRecord::Migration[5.0]
   def change
     add_column :petitions, :show_all_signatures, :boolean, default: false
   end
diff --git a/db/migrate/20160601003317_create_institution_sets.rb b/db/migrate/20160601003317_create_institution_sets.rb
index 9ee61fbad..d00c9bc71 100644
--- a/db/migrate/20160601003317_create_institution_sets.rb
+++ b/db/migrate/20160601003317_create_institution_sets.rb
@@ -1,4 +1,4 @@
-class CreateInstitutionSets < ActiveRecord::Migration
+class CreateInstitutionSets < ActiveRecord::Migration[5.0]
   def change
     create_table :institution_sets do |t|
       t.string :name
diff --git a/db/migrate/20160606202236_create_institutions.rb b/db/migrate/20160606202236_create_institutions.rb
index a8447c1f3..ab576418f 100644
--- a/db/migrate/20160606202236_create_institutions.rb
+++ b/db/migrate/20160606202236_create_institutions.rb
@@ -1,4 +1,4 @@
-class CreateInstitutions < ActiveRecord::Migration
+class CreateInstitutions < ActiveRecord::Migration[5.0]
   def change
     create_table :institutions do |t|
       t.string :name
diff --git a/db/migrate/20160606222456_add_enable_affiliations_to_petitions.rb b/db/migrate/20160606222456_add_enable_affiliations_to_petitions.rb
index 7b357d44b..aafa9d242 100644
--- a/db/migrate/20160606222456_add_enable_affiliations_to_petitions.rb
+++ b/db/migrate/20160606222456_add_enable_affiliations_to_petitions.rb
@@ -1,4 +1,4 @@
-class AddEnableAffiliationsToPetitions < ActiveRecord::Migration
+class AddEnableAffiliationsToPetitions < ActiveRecord::Migration[5.0]
   def change
     add_column :petitions, :enable_affiliations, :boolean, default: false
     add_column :petitions, :institution_set_id, :integer
diff --git a/db/migrate/20160610205339_create_action_allowed_institutions.rb b/db/migrate/20160610205339_create_action_allowed_institutions.rb
index 6fcafe5c5..fd43d414a 100644
--- a/db/migrate/20160610205339_create_action_allowed_institutions.rb
+++ b/db/migrate/20160610205339_create_action_allowed_institutions.rb
@@ -1,4 +1,4 @@
-class CreateActionAllowedInstitutions < ActiveRecord::Migration
+class CreateActionAllowedInstitutions < ActiveRecord::Migration[5.0]
   def change
     remove_column :institutions, :institution_set_id, :integer
     remove_column :petitions, :institution_set_id, :integer
diff --git a/db/migrate/20160616000020_create_affiliations.rb b/db/migrate/20160616000020_create_affiliations.rb
index e0db95f34..8fe0e8a48 100644
--- a/db/migrate/20160616000020_create_affiliations.rb
+++ b/db/migrate/20160616000020_create_affiliations.rb
@@ -1,4 +1,4 @@
-class CreateAffiliations < ActiveRecord::Migration
+class CreateAffiliations < ActiveRecord::Migration[5.0]
   def change
     create_table :affiliations do |t|
       t.string :name
diff --git a/db/migrate/20160629191322_create_affiliation_types.rb b/db/migrate/20160629191322_create_affiliation_types.rb
index 451eec67b..e916b4050 100644
--- a/db/migrate/20160629191322_create_affiliation_types.rb
+++ b/db/migrate/20160629191322_create_affiliation_types.rb
@@ -1,4 +1,4 @@
-class CreateAffiliationTypes < ActiveRecord::Migration
+class CreateAffiliationTypes < ActiveRecord::Migration[5.0]
   def change
     create_table :affiliation_types do |t|
       t.string :name
diff --git a/db/migrate/20160718225646_add_slug_to_institution.rb b/db/migrate/20160718225646_add_slug_to_institution.rb
index 2a7ee1266..45b1a6527 100644
--- a/db/migrate/20160718225646_add_slug_to_institution.rb
+++ b/db/migrate/20160718225646_add_slug_to_institution.rb
@@ -1,4 +1,4 @@
-class AddSlugToInstitution < ActiveRecord::Migration
+class AddSlugToInstitution < ActiveRecord::Migration[5.0]
   def change
     add_column :institutions, :slug, :string
     add_index :institutions, :slug, unique: true
diff --git a/db/migrate/20160719204420_remove_show_all_signatures_from_petition.rb b/db/migrate/20160719204420_remove_show_all_signatures_from_petition.rb
index edc0b98bb..6bbd5f5dc 100644
--- a/db/migrate/20160719204420_remove_show_all_signatures_from_petition.rb
+++ b/db/migrate/20160719204420_remove_show_all_signatures_from_petition.rb
@@ -1,4 +1,4 @@
-class RemoveShowAllSignaturesFromPetition < ActiveRecord::Migration
+class RemoveShowAllSignaturesFromPetition < ActiveRecord::Migration[5.0]
   def change
     remove_column :petitions, :show_all_signatures, :boolean, default: false
   end
diff --git a/db/migrate/20160908225616_add_subscriptions_count_to_partners.rb b/db/migrate/20160908225616_add_subscriptions_count_to_partners.rb
index 04dc3e36c..c88d35803 100644
--- a/db/migrate/20160908225616_add_subscriptions_count_to_partners.rb
+++ b/db/migrate/20160908225616_add_subscriptions_count_to_partners.rb
@@ -1,4 +1,4 @@
-class AddSubscriptionsCountToPartners < ActiveRecord::Migration
+class AddSubscriptionsCountToPartners < ActiveRecord::Migration[5.0]
   def up
     add_column :partners, :subscriptions_count, :integer, null: false, default: 0
 
diff --git a/db/migrate/20161011172943_add_issue_to_action_pages.rb b/db/migrate/20161011172943_add_issue_to_action_pages.rb
index a40bf78ce..a0a071130 100644
--- a/db/migrate/20161011172943_add_issue_to_action_pages.rb
+++ b/db/migrate/20161011172943_add_issue_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddIssueToActionPages < ActiveRecord::Migration
+class AddIssueToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :issue, :string
   end
diff --git a/db/migrate/20161017180108_rename_action_pages_issue_to_action_pages_category.rb b/db/migrate/20161017180108_rename_action_pages_issue_to_action_pages_category.rb
index a525b2ac7..0653b9afa 100644
--- a/db/migrate/20161017180108_rename_action_pages_issue_to_action_pages_category.rb
+++ b/db/migrate/20161017180108_rename_action_pages_issue_to_action_pages_category.rb
@@ -1,4 +1,4 @@
-class RenameActionPagesIssueToActionPagesCategory < ActiveRecord::Migration
+class RenameActionPagesIssueToActionPagesCategory < ActiveRecord::Migration[5.0]
   def change
     rename_column :action_pages, :issue, :category
   end
diff --git a/db/migrate/20161017233304_create_categories.rb b/db/migrate/20161017233304_create_categories.rb
index 9167ebb74..854d5bddc 100644
--- a/db/migrate/20161017233304_create_categories.rb
+++ b/db/migrate/20161017233304_create_categories.rb
@@ -1,4 +1,4 @@
-class CreateCategories < ActiveRecord::Migration
+class CreateCategories < ActiveRecord::Migration[5.0]
   def change
     create_table :categories do |t|
       t.string :title, null: false
diff --git a/db/migrate/20161017233352_add_category_id_to_action_pages.rb b/db/migrate/20161017233352_add_category_id_to_action_pages.rb
index fbe80e580..21fd8a130 100644
--- a/db/migrate/20161017233352_add_category_id_to_action_pages.rb
+++ b/db/migrate/20161017233352_add_category_id_to_action_pages.rb
@@ -1,4 +1,4 @@
-class AddCategoryIdToActionPages < ActiveRecord::Migration
+class AddCategoryIdToActionPages < ActiveRecord::Migration[5.0]
   def change
     add_column :action_pages, :category_id, :integer
     remove_column :action_pages, :category
diff --git a/db/migrate/20161018212449_create_congress_members.rb b/db/migrate/20161018212449_create_congress_members.rb
index 1d4bf9d97..11debb704 100644
--- a/db/migrate/20161018212449_create_congress_members.rb
+++ b/db/migrate/20161018212449_create_congress_members.rb
@@ -1,4 +1,4 @@
-class CreateCongressMembers < ActiveRecord::Migration
+class CreateCongressMembers < ActiveRecord::Migration[5.0]
   def change
     create_table :congress_members do |t|
       t.string :full_name,   null: false
diff --git a/db/migrate/20161025215124_add_collaborator_to_users.rb b/db/migrate/20161025215124_add_collaborator_to_users.rb
index 441bcb66c..05ee133fc 100644
--- a/db/migrate/20161025215124_add_collaborator_to_users.rb
+++ b/db/migrate/20161025215124_add_collaborator_to_users.rb
@@ -1,4 +1,4 @@
-class AddCollaboratorToUsers < ActiveRecord::Migration
+class AddCollaboratorToUsers < ActiveRecord::Migration[5.0]
   def change
     add_column :users, :collaborator, :boolean, null: false, default: false
   end
diff --git a/db/migrate/20161109191337_create_congress_message_campaigns.rb b/db/migrate/20161109191337_create_congress_message_campaigns.rb
index 43dc4a3b7..c459a0d02 100644
--- a/db/migrate/20161109191337_create_congress_message_campaigns.rb
+++ b/db/migrate/20161109191337_create_congress_message_campaigns.rb
@@ -1,4 +1,4 @@
-class CreateCongressMessageCampaigns < ActiveRecord::Migration
+class CreateCongressMessageCampaigns < ActiveRecord::Migration[5.0]
   class CongressMessageCampaign < ActiveRecord::Base
     has_one :action_page
   end
diff --git a/db/migrate/20170721170625_create_complaints.rb b/db/migrate/20170721170625_create_complaints.rb
index affdfe15e..ae1e9981a 100644
--- a/db/migrate/20170721170625_create_complaints.rb
+++ b/db/migrate/20170721170625_create_complaints.rb
@@ -1,4 +1,4 @@
-class CreateComplaints < ActiveRecord::Migration
+class CreateComplaints < ActiveRecord::Migration[5.0]
   def change
     create_table :complaints do |t|
       t.string :email
diff --git a/db/migrate/20170831214704_create_partnerships.rb b/db/migrate/20170831214704_create_partnerships.rb
index bd6e819bb..53985b739 100644
--- a/db/migrate/20170831214704_create_partnerships.rb
+++ b/db/migrate/20170831214704_create_partnerships.rb
@@ -1,4 +1,4 @@
-class CreatePartnerships < ActiveRecord::Migration
+class CreatePartnerships < ActiveRecord::Migration[5.0]
   def up
     create_table :partnerships do |t|
       t.belongs_to :action_page, index: true
diff --git a/db/migrate/20180124013711_add_sessions_table.rb b/db/migrate/20180124013711_add_sessions_table.rb
index e0b41c7d7..4ebe4f6ea 100644
--- a/db/migrate/20180124013711_add_sessions_table.rb
+++ b/db/migrate/20180124013711_add_sessions_table.rb
@@ -1,4 +1,4 @@
-class AddSessionsTable < ActiveRecord::Migration
+class AddSessionsTable < ActiveRecord::Migration[5.0]
   def change
     create_table :sessions do |t|
       t.string :session_id, :null => false
diff --git a/db/migrate/20180516215539_change_subscription_defaults.rb b/db/migrate/20180516215539_change_subscription_defaults.rb
index c6f6370f6..df1c71d96 100644
--- a/db/migrate/20180516215539_change_subscription_defaults.rb
+++ b/db/migrate/20180516215539_change_subscription_defaults.rb
@@ -1,4 +1,4 @@
-class ChangeSubscriptionDefaults < ActiveRecord::Migration
+class ChangeSubscriptionDefaults < ActiveRecord::Migration[5.0]
   def up
     change_column :users, :subscribe, :boolean, default: false
     change_column :users, :record_activity, :boolean, default: false
diff --git a/db/migrate/20191031184958_add_logo_to_partners.rb b/db/migrate/20191031184958_add_logo_to_partners.rb
index 5665283de..cee82e686 100644
--- a/db/migrate/20191031184958_add_logo_to_partners.rb
+++ b/db/migrate/20191031184958_add_logo_to_partners.rb
@@ -1,11 +1,9 @@
 class AddLogoToPartners < ActiveRecord::Migration[5.0]
-  def up
-    add_attachment :partners, :logo
+  def change
+    add_column :action_pages, :logo_file_name, :string
+    add_column :action_pages, :logo_content_type, :string
+    add_column :action_pages, :logo_file_size, :bigint
+    add_column :action_pages, :logo_updated_at, :datetime
     add_column :partnerships, :enable_mailings, :boolean, default: false, null: false
   end
-
-  def down
-    remove_attachment :partners, :logo
-    remove_column :partnerships, :enable_mailings, :boolean, default: false, null: false
-  end
 end
diff --git a/db/migrate/20220923210415_add_state_targets_to_email_campaigns.rb b/db/migrate/20220923210415_add_state_targets_to_email_campaigns.rb
new file mode 100644
index 000000000..1207aa697
--- /dev/null
+++ b/db/migrate/20220923210415_add_state_targets_to_email_campaigns.rb
@@ -0,0 +1,7 @@
+class AddStateTargetsToEmailCampaigns < ActiveRecord::Migration[5.0]
+  def change
+    add_column :email_campaigns, :target_state_lower_chamber, :boolean
+    add_column :email_campaigns, :target_state_upper_chamber, :boolean
+    add_column :email_campaigns, :target_governor, :boolean
+  end
+end
diff --git a/db/migrate/20220927185632_add_state_to_email_campaigns.rb b/db/migrate/20220927185632_add_state_to_email_campaigns.rb
new file mode 100644
index 000000000..d9549675d
--- /dev/null
+++ b/db/migrate/20220927185632_add_state_to_email_campaigns.rb
@@ -0,0 +1,5 @@
+class AddStateToEmailCampaigns < ActiveRecord::Migration[5.0]
+  def change
+    add_column :email_campaigns, :state, :string
+  end
+end
diff --git a/db/migrate/20240419170851_add_service_name_to_active_storage_blobs.active_storage.rb b/db/migrate/20240419170851_add_service_name_to_active_storage_blobs.active_storage.rb
new file mode 100644
index 000000000..a15c6ce8e
--- /dev/null
+++ b/db/migrate/20240419170851_add_service_name_to_active_storage_blobs.active_storage.rb
@@ -0,0 +1,22 @@
+# This migration comes from active_storage (originally 20190112182829)
+class AddServiceNameToActiveStorageBlobs < ActiveRecord::Migration[6.0]
+  def up
+    return unless table_exists?(:active_storage_blobs)
+
+    unless column_exists?(:active_storage_blobs, :service_name)
+      add_column :active_storage_blobs, :service_name, :string
+
+      if configured_service = ActiveStorage::Blob.service.name
+        ActiveStorage::Blob.unscoped.update_all(service_name: configured_service)
+      end
+
+      change_column :active_storage_blobs, :service_name, :string, null: false
+    end
+  end
+
+  def down
+    return unless table_exists?(:active_storage_blobs)
+
+    remove_column :active_storage_blobs, :service_name
+  end
+end
diff --git a/db/migrate/20240419170852_create_active_storage_variant_records.active_storage.rb b/db/migrate/20240419170852_create_active_storage_variant_records.active_storage.rb
new file mode 100644
index 000000000..94ac83af0
--- /dev/null
+++ b/db/migrate/20240419170852_create_active_storage_variant_records.active_storage.rb
@@ -0,0 +1,27 @@
+# This migration comes from active_storage (originally 20191206030411)
+class CreateActiveStorageVariantRecords < ActiveRecord::Migration[6.0]
+  def change
+    return unless table_exists?(:active_storage_blobs)
+
+    # Use Active Record's configured type for primary key
+    create_table :active_storage_variant_records, id: primary_key_type, if_not_exists: true do |t|
+      t.belongs_to :blob, null: false, index: false, type: blobs_primary_key_type
+      t.string :variation_digest, null: false
+
+      t.index %i[ blob_id variation_digest ], name: "index_active_storage_variant_records_uniqueness", unique: true
+      t.foreign_key :active_storage_blobs, column: :blob_id
+    end
+  end
+
+  private
+    def primary_key_type
+      config = Rails.configuration.generators
+      config.options[config.orm][:primary_key_type] || :primary_key
+    end
+
+    def blobs_primary_key_type
+      pkey_name = connection.primary_key(:active_storage_blobs)
+      pkey_column = connection.columns(:active_storage_blobs).find { |c| c.name == pkey_name }
+      pkey_column.bigint? ? :bigint : pkey_column.type
+    end
+end
diff --git a/db/migrate/20240419170853_remove_not_null_on_active_storage_blobs_checksum.active_storage.rb b/db/migrate/20240419170853_remove_not_null_on_active_storage_blobs_checksum.active_storage.rb
new file mode 100644
index 000000000..93c8b85ad
--- /dev/null
+++ b/db/migrate/20240419170853_remove_not_null_on_active_storage_blobs_checksum.active_storage.rb
@@ -0,0 +1,8 @@
+# This migration comes from active_storage (originally 20211119233751)
+class RemoveNotNullOnActiveStorageBlobsChecksum < ActiveRecord::Migration[6.0]
+  def change
+    return unless table_exists?(:active_storage_blobs)
+
+    change_column_null(:active_storage_blobs, :checksum, true)
+  end
+end
diff --git a/db/schema.rb b/db/schema.rb
index 5ae698af0..20b3ee724 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -2,438 +2,441 @@
 # of editing this file, please use the migrations feature of Active Record to
 # incrementally modify your database, and then regenerate this schema definition.
 #
-# Note that this schema.rb definition is the authoritative source for your
-# database schema. If you need to create the application database on another
-# system, you should be using db:schema:load, not running all the migrations
-# from scratch. The latter is a flawed and unsustainable approach (the more migrations
-# you'll amass, the slower it'll run and the greater likelihood for issues).
+# This file is the source Rails uses to define your schema when running `bin/rails
+# db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to
+# be faster and is potentially less error prone than running all of your
+# migrations from scratch. Old migrations may fail to apply correctly if those
+# migrations use external dependencies or application code.
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20200324153626) do
-
+ActiveRecord::Schema[7.0].define(version: 2024_04_19_170853) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
   enable_extension "uuid-ossp"
 
-  create_table "action_institutions", force: :cascade do |t|
-    t.integer  "action_page_id"
-    t.integer  "institution_id"
-    t.datetime "created_at",     null: false
-    t.datetime "updated_at",     null: false
-    t.index ["action_page_id"], name: "index_action_institutions_on_action_page_id", using: :btree
-    t.index ["institution_id"], name: "index_action_institutions_on_institution_id", using: :btree
-  end
-
-  create_table "action_page_images", force: :cascade do |t|
-    t.integer  "action_page_id"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string   "image_file_name",    limit: 255
-    t.string   "image_content_type", limit: 255
-    t.integer  "image_file_size"
-    t.string   "action_image",       limit: 255
-    t.index ["action_page_id"], name: "index_action_page_images_on_action_page_id", using: :btree
-  end
-
-  create_table "action_pages", force: :cascade do |t|
-    t.string   "title",                            limit: 255
-    t.text     "description"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.boolean  "call_tool"
-    t.integer  "petition_id"
-    t.string   "photo_url",                        limit: 255
-    t.boolean  "enable_call",                                  default: false
-    t.boolean  "enable_petition",                              default: false
-    t.boolean  "enable_email",                                 default: false
-    t.boolean  "enable_tweet",                                 default: false
-    t.string   "slug",                             limit: 255
-    t.string   "share_message",                    limit: 255
-    t.integer  "tweet_id"
-    t.boolean  "published",                                    default: false
-    t.string   "featured_image_file_name",         limit: 255
-    t.string   "featured_image_content_type",      limit: 255
-    t.integer  "featured_image_file_size"
-    t.datetime "featured_image_updated_at"
-    t.string   "action_page_image",                limit: 255
-    t.text     "what_to_say"
-    t.integer  "email_campaign_id"
-    t.integer  "call_campaign_id"
-    t.text     "summary"
-    t.string   "background_image_file_name",       limit: 255
-    t.string   "background_image_content_type",    limit: 255
-    t.integer  "background_image_file_size"
-    t.datetime "background_image_updated_at"
-    t.string   "template",                         limit: 255
-    t.string   "layout",                           limit: 255
-    t.string   "og_title",                         limit: 255
-    t.string   "og_image_file_name",               limit: 255
-    t.string   "og_image_content_type",            limit: 255
-    t.integer  "og_image_file_size"
-    t.datetime "og_image_updated_at"
-    t.boolean  "enable_redirect",                              default: false
-    t.string   "redirect_url",                     limit: 255
-    t.text     "email_text"
-    t.boolean  "victory",                                      default: false
-    t.text     "victory_message"
-    t.boolean  "archived",                                     default: false
-    t.integer  "archived_redirect_action_page_id"
-    t.integer  "category_id"
-    t.boolean  "enable_congress_message",                      default: false, null: false
-    t.integer  "congress_message_campaign_id"
-    t.string   "related_content_url"
-    t.integer  "user_id"
-    t.integer  "view_count",                                   default: 0,     null: false
-    t.integer  "action_count",                                 default: 0,     null: false
-    t.index ["archived"], name: "index_action_pages_on_archived", using: :btree
-    t.index ["call_campaign_id"], name: "index_action_pages_on_call_campaign_id", using: :btree
-    t.index ["email_campaign_id"], name: "index_action_pages_on_email_campaign_id", using: :btree
-    t.index ["petition_id"], name: "index_action_pages_on_petition_id", using: :btree
-    t.index ["slug"], name: "index_action_pages_on_slug", using: :btree
-    t.index ["tweet_id"], name: "index_action_pages_on_tweet_id", using: :btree
-    t.index ["user_id"], name: "index_action_pages_on_user_id", using: :btree
-  end
-
-  create_table "affiliation_types", force: :cascade do |t|
-    t.string   "name"
-    t.integer  "action_page_id"
-    t.datetime "created_at",     null: false
-    t.datetime "updated_at",     null: false
-    t.index ["action_page_id"], name: "index_affiliation_types_on_action_page_id", using: :btree
-  end
-
-  create_table "affiliations", force: :cascade do |t|
-    t.datetime "created_at",          null: false
-    t.datetime "updated_at",          null: false
-    t.integer  "signature_id"
-    t.integer  "institution_id"
-    t.integer  "affiliation_type_id"
-    t.index ["affiliation_type_id"], name: "index_affiliations_on_affiliation_type_id", using: :btree
-    t.index ["institution_id"], name: "index_affiliations_on_institution_id", using: :btree
-    t.index ["signature_id"], name: "index_affiliations_on_signature_id", using: :btree
+  create_table "action_institutions", id: :serial, force: :cascade do |t|
+    t.integer "action_page_id"
+    t.integer "institution_id"
+    t.datetime "created_at", precision: nil, null: false
+    t.datetime "updated_at", precision: nil, null: false
+    t.index ["action_page_id"], name: "index_action_institutions_on_action_page_id"
+    t.index ["institution_id"], name: "index_action_institutions_on_institution_id"
+  end
+
+  create_table "action_page_images", id: :serial, force: :cascade do |t|
+    t.integer "action_page_id"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.string "image_file_name", limit: 255
+    t.string "image_content_type", limit: 255
+    t.integer "image_file_size"
+    t.string "action_image", limit: 255
+    t.index ["action_page_id"], name: "index_action_page_images_on_action_page_id"
+  end
+
+  create_table "action_pages", id: :serial, force: :cascade do |t|
+    t.string "title", limit: 255
+    t.text "description"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.boolean "call_tool"
+    t.integer "petition_id"
+    t.string "photo_url", limit: 255
+    t.boolean "enable_call", default: false
+    t.boolean "enable_petition", default: false
+    t.boolean "enable_email", default: false
+    t.boolean "enable_tweet", default: false
+    t.string "slug", limit: 255
+    t.string "share_message", limit: 255
+    t.integer "tweet_id"
+    t.boolean "published", default: false
+    t.string "featured_image_file_name", limit: 255
+    t.string "featured_image_content_type", limit: 255
+    t.integer "featured_image_file_size"
+    t.datetime "featured_image_updated_at", precision: nil
+    t.string "action_page_image", limit: 255
+    t.text "what_to_say"
+    t.integer "email_campaign_id"
+    t.integer "call_campaign_id"
+    t.text "summary"
+    t.string "background_image_file_name", limit: 255
+    t.string "background_image_content_type", limit: 255
+    t.integer "background_image_file_size"
+    t.datetime "background_image_updated_at", precision: nil
+    t.string "template", limit: 255
+    t.string "layout", limit: 255
+    t.string "og_title", limit: 255
+    t.string "og_image_file_name", limit: 255
+    t.string "og_image_content_type", limit: 255
+    t.integer "og_image_file_size"
+    t.datetime "og_image_updated_at", precision: nil
+    t.boolean "enable_redirect", default: false
+    t.string "redirect_url", limit: 255
+    t.text "email_text"
+    t.boolean "victory", default: false
+    t.text "victory_message"
+    t.boolean "archived", default: false
+    t.integer "archived_redirect_action_page_id"
+    t.integer "category_id"
+    t.boolean "enable_congress_message", default: false, null: false
+    t.integer "congress_message_campaign_id"
+    t.string "related_content_url"
+    t.integer "user_id"
+    t.integer "view_count", default: 0, null: false
+    t.integer "action_count", default: 0, null: false
+    t.index ["archived"], name: "index_action_pages_on_archived"
+    t.index ["call_campaign_id"], name: "index_action_pages_on_call_campaign_id"
+    t.index ["email_campaign_id"], name: "index_action_pages_on_email_campaign_id"
+    t.index ["petition_id"], name: "index_action_pages_on_petition_id"
+    t.index ["slug"], name: "index_action_pages_on_slug"
+    t.index ["tweet_id"], name: "index_action_pages_on_tweet_id"
+    t.index ["user_id"], name: "index_action_pages_on_user_id"
+  end
+
+  create_table "affiliation_types", id: :serial, force: :cascade do |t|
+    t.string "name"
+    t.integer "action_page_id"
+    t.datetime "created_at", precision: nil, null: false
+    t.datetime "updated_at", precision: nil, null: false
+    t.index ["action_page_id"], name: "index_affiliation_types_on_action_page_id"
+  end
+
+  create_table "affiliations", id: :serial, force: :cascade do |t|
+    t.datetime "created_at", precision: nil, null: false
+    t.datetime "updated_at", precision: nil, null: false
+    t.integer "signature_id"
+    t.integer "institution_id"
+    t.integer "affiliation_type_id"
+    t.index ["affiliation_type_id"], name: "index_affiliations_on_affiliation_type_id"
+    t.index ["institution_id"], name: "index_affiliations_on_institution_id"
+    t.index ["signature_id"], name: "index_affiliations_on_signature_id"
   end
 
   create_table "ahoy_events", id: :uuid, default: nil, force: :cascade do |t|
-    t.uuid     "visit_id"
-    t.integer  "user_id"
-    t.string   "name",           limit: 255
-    t.json     "properties"
-    t.datetime "time"
-    t.integer  "action_page_id"
-    t.index ["action_page_id"], name: "index_ahoy_events_on_action_page_id", using: :btree
-    t.index ["time"], name: "index_ahoy_events_on_time", using: :btree
-    t.index ["user_id"], name: "index_ahoy_events_on_user_id", using: :btree
-    t.index ["visit_id"], name: "index_ahoy_events_on_visit_id", using: :btree
-  end
-
-  create_table "bounces", force: :cascade do |t|
+    t.uuid "visit_id"
+    t.integer "user_id"
+    t.string "name", limit: 255
+    t.json "properties"
+    t.datetime "time", precision: nil
+    t.integer "action_page_id"
+    t.index ["action_page_id"], name: "index_ahoy_events_on_action_page_id"
+    t.index ["time"], name: "index_ahoy_events_on_time"
+    t.index ["user_id"], name: "index_ahoy_events_on_user_id"
+    t.index ["visit_id"], name: "index_ahoy_events_on_visit_id"
+  end
+
+  create_table "bounces", id: :serial, force: :cascade do |t|
     t.string "email", limit: 255
   end
 
-  create_table "call_campaigns", force: :cascade do |t|
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string   "title",            limit: 255
-    t.text     "message"
-    t.string   "call_campaign_id", limit: 255
-  end
-
-  create_table "categories", force: :cascade do |t|
-    t.string   "title",      null: false
-    t.datetime "created_at"
-    t.datetime "updated_at"
-  end
-
-  create_table "complaints", force: :cascade do |t|
-    t.string   "email"
-    t.string   "feedback_type"
-    t.string   "user_agent"
-    t.json     "body"
-    t.datetime "created_at",    null: false
-    t.datetime "updated_at",    null: false
-  end
-
-  create_table "congress_members", force: :cascade do |t|
-    t.string   "full_name",   null: false
-    t.string   "first_name",  null: false
-    t.string   "last_name",   null: false
-    t.string   "bioguide_id", null: false
-    t.string   "twitter_id"
-    t.string   "phone"
-    t.date     "term_end",    null: false
-    t.string   "chamber",     null: false
-    t.string   "state",       null: false
-    t.integer  "district"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-  end
-
-  create_table "congress_message_campaigns", force: :cascade do |t|
-    t.string   "subject",                                           null: false
-    t.text     "message",                                           null: false
-    t.string   "campaign_tag",                                      null: false
-    t.boolean  "target_house",                      default: true,  null: false
-    t.boolean  "target_senate",                     default: true,  null: false
-    t.string   "target_bioguide_ids"
-    t.integer  "topic_category_id"
-    t.string   "alt_text_email_your_rep"
-    t.string   "alt_text_look_up_your_rep"
-    t.string   "alt_text_extra_fields_explain"
-    t.string   "alt_text_look_up_helper"
-    t.string   "alt_text_customize_message_helper"
-    t.datetime "created_at",                                        null: false
-    t.datetime "updated_at",                                        null: false
-    t.boolean  "enable_customization_notice",       default: false
-  end
-
-  create_table "congress_scorecards", force: :cascade do |t|
-    t.string  "bioguide_id",    limit: 255
+  create_table "call_campaigns", id: :serial, force: :cascade do |t|
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.string "title", limit: 255
+    t.text "message"
+    t.string "call_campaign_id", limit: 255
+  end
+
+  create_table "categories", id: :serial, force: :cascade do |t|
+    t.string "title", null: false
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+  end
+
+  create_table "complaints", id: :serial, force: :cascade do |t|
+    t.string "email"
+    t.string "feedback_type"
+    t.string "user_agent"
+    t.json "body"
+    t.datetime "created_at", precision: nil, null: false
+    t.datetime "updated_at", precision: nil, null: false
+  end
+
+  create_table "congress_members", id: :serial, force: :cascade do |t|
+    t.string "full_name", null: false
+    t.string "first_name", null: false
+    t.string "last_name", null: false
+    t.string "bioguide_id", null: false
+    t.string "twitter_id"
+    t.string "phone"
+    t.date "term_end", null: false
+    t.string "chamber", null: false
+    t.string "state", null: false
+    t.integer "district"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+  end
+
+  create_table "congress_message_campaigns", id: :serial, force: :cascade do |t|
+    t.string "subject", null: false
+    t.text "message", null: false
+    t.string "campaign_tag", null: false
+    t.boolean "target_house", default: true, null: false
+    t.boolean "target_senate", default: true, null: false
+    t.string "target_bioguide_ids"
+    t.integer "topic_category_id"
+    t.string "alt_text_email_your_rep"
+    t.string "alt_text_look_up_your_rep"
+    t.string "alt_text_extra_fields_explain"
+    t.string "alt_text_look_up_helper"
+    t.string "alt_text_customize_message_helper"
+    t.datetime "created_at", precision: nil, null: false
+    t.datetime "updated_at", precision: nil, null: false
+    t.boolean "enable_customization_notice", default: false
+  end
+
+  create_table "congress_scorecards", id: :serial, force: :cascade do |t|
+    t.string "bioguide_id", limit: 255
     t.integer "action_page_id"
-    t.integer "counter",                    default: 0
-    t.index ["action_page_id", "bioguide_id"], name: "index_congress_scorecards_on_action_page_id_and_bioguide_id", using: :btree
-  end
-
-  create_table "delayed_jobs", force: :cascade do |t|
-    t.integer  "priority",               default: 0, null: false
-    t.integer  "attempts",               default: 0, null: false
-    t.text     "handler",                            null: false
-    t.text     "last_error"
-    t.datetime "run_at"
-    t.datetime "locked_at"
-    t.datetime "failed_at"
-    t.string   "locked_by",  limit: 255
-    t.string   "queue",      limit: 255
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.index ["priority", "run_at"], name: "delayed_jobs_priority", using: :btree
-  end
-
-  create_table "email_campaigns", force: :cascade do |t|
-    t.text     "message"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string   "subject",         limit: 255
-    t.string   "campaign_tag",    limit: 255
-    t.string   "email_addresses", limit: 255
-  end
-
-  create_table "featured_action_pages", force: :cascade do |t|
+    t.integer "counter", default: 0
+    t.index ["action_page_id", "bioguide_id"], name: "index_congress_scorecards_on_action_page_id_and_bioguide_id"
+  end
+
+  create_table "delayed_jobs", id: :serial, force: :cascade do |t|
+    t.integer "priority", default: 0, null: false
+    t.integer "attempts", default: 0, null: false
+    t.text "handler", null: false
+    t.text "last_error"
+    t.datetime "run_at", precision: nil
+    t.datetime "locked_at", precision: nil
+    t.datetime "failed_at", precision: nil
+    t.string "locked_by", limit: 255
+    t.string "queue", limit: 255
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.index ["priority", "run_at"], name: "delayed_jobs_priority"
+  end
+
+  create_table "email_campaigns", id: :serial, force: :cascade do |t|
+    t.text "message"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.string "subject", limit: 255
+    t.string "campaign_tag", limit: 255
+    t.string "email_addresses"
+    t.boolean "target_state_lower_chamber"
+    t.boolean "target_state_upper_chamber"
+    t.boolean "target_governor"
+    t.string "state"
+  end
+
+  create_table "featured_action_pages", id: :serial, force: :cascade do |t|
     t.integer "action_page_id"
     t.integer "weight"
-    t.index ["action_page_id"], name: "index_featured_action_pages_on_action_page_id", using: :btree
+    t.index ["action_page_id"], name: "index_featured_action_pages_on_action_page_id"
   end
 
-  create_table "friendly_id_slugs", force: :cascade do |t|
-    t.string   "slug",           limit: 255, null: false
-    t.integer  "sluggable_id",               null: false
-    t.string   "sluggable_type", limit: 50
-    t.string   "scope",          limit: 255
-    t.datetime "created_at"
-    t.index ["slug", "sluggable_type", "scope"], name: "index_friendly_id_slugs_on_slug_and_sluggable_type_and_scope", unique: true, using: :btree
-    t.index ["slug", "sluggable_type"], name: "index_friendly_id_slugs_on_slug_and_sluggable_type", using: :btree
-    t.index ["sluggable_id"], name: "index_friendly_id_slugs_on_sluggable_id", using: :btree
-    t.index ["sluggable_type"], name: "index_friendly_id_slugs_on_sluggable_type", using: :btree
+  create_table "friendly_id_slugs", id: :serial, force: :cascade do |t|
+    t.string "slug", limit: 255, null: false
+    t.integer "sluggable_id", null: false
+    t.string "sluggable_type", limit: 50
+    t.string "scope", limit: 255
+    t.datetime "created_at", precision: nil
+    t.index ["slug", "sluggable_type", "scope"], name: "index_friendly_id_slugs_on_slug_and_sluggable_type_and_scope", unique: true
+    t.index ["slug", "sluggable_type"], name: "index_friendly_id_slugs_on_slug_and_sluggable_type"
+    t.index ["sluggable_id"], name: "index_friendly_id_slugs_on_sluggable_id"
+    t.index ["sluggable_type"], name: "index_friendly_id_slugs_on_sluggable_type"
   end
 
-  create_table "institutions", force: :cascade do |t|
-    t.string   "name"
-    t.datetime "created_at", null: false
-    t.datetime "updated_at", null: false
-    t.string   "slug"
-    t.string   "category",   null: false
-    t.index ["slug"], name: "index_institutions_on_slug", unique: true, using: :btree
+  create_table "institutions", id: :serial, force: :cascade do |t|
+    t.string "name"
+    t.datetime "created_at", precision: nil, null: false
+    t.datetime "updated_at", precision: nil, null: false
+    t.string "slug"
+    t.string "category", null: false
+    t.index ["slug"], name: "index_institutions_on_slug", unique: true
   end
 
-  create_table "locales", primary_key: "locale", id: :string, limit: 5, force: :cascade do |t|
-    t.string "name",     limit: 60, null: false
+  create_table "locales", primary_key: "locale", id: { type: :string, limit: 5 }, force: :cascade do |t|
+    t.string "name", limit: 60, null: false
     t.string "fullname", limit: 60, null: false
   end
 
-  create_table "partners", force: :cascade do |t|
-    t.string   "code",                limit: 255
-    t.string   "name",                limit: 255
-    t.string   "privacy_url",         limit: 255
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.time     "deleted_at"
-    t.integer  "subscriptions_count",             default: 0, null: false
-    t.string   "logo_file_name"
-    t.string   "logo_content_type"
-    t.integer  "logo_file_size"
-    t.datetime "logo_updated_at"
-  end
-
-  create_table "partnerships", force: :cascade do |t|
+  create_table "partners", id: :serial, force: :cascade do |t|
+    t.string "code", limit: 255
+    t.string "name", limit: 255
+    t.string "privacy_url", limit: 255
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.time "deleted_at"
+    t.integer "subscriptions_count", default: 0, null: false
+    t.string "logo_file_name"
+    t.string "logo_content_type"
+    t.integer "logo_file_size"
+    t.datetime "logo_updated_at", precision: nil
+  end
+
+  create_table "partnerships", id: :serial, force: :cascade do |t|
     t.integer "action_page_id"
     t.integer "partner_id"
     t.boolean "enable_mailings", default: false, null: false
-    t.index ["action_page_id"], name: "index_partnerships_on_action_page_id", using: :btree
-    t.index ["partner_id"], name: "index_partnerships_on_partner_id", using: :btree
-  end
-
-  create_table "petitions", force: :cascade do |t|
-    t.string   "title",               limit: 255
-    t.text     "description"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.integer  "goal"
-    t.boolean  "enable_affiliations",             default: false
-  end
-
-  create_table "sessions", force: :cascade do |t|
-    t.string   "session_id", null: false
-    t.text     "data"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.index ["session_id"], name: "index_sessions_on_session_id", unique: true, using: :btree
-    t.index ["updated_at"], name: "index_sessions_on_updated_at", using: :btree
-  end
-
-  create_table "signatures", force: :cascade do |t|
-    t.integer  "petition_id"
-    t.integer  "user_id"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string   "first_name",     limit: 255
-    t.string   "last_name",      limit: 255
-    t.string   "email",          limit: 255
-    t.string   "country_code",   limit: 255
-    t.string   "zipcode",        limit: 255
-    t.string   "street_address", limit: 255
-    t.string   "city",           limit: 255
-    t.string   "state",          limit: 255
-    t.boolean  "anonymous",                  default: false
-    t.index ["petition_id"], name: "index_signatures_on_petition_id", using: :btree
-    t.index ["user_id"], name: "index_signatures_on_user_id", using: :btree
-  end
-
-  create_table "source_files", force: :cascade do |t|
-    t.string   "file_name",         limit: 255
-    t.string   "file_content_type", limit: 255
-    t.integer  "file_size"
-    t.string   "key",               limit: 255
-    t.string   "bucket",            limit: 255
-    t.datetime "created_at"
-    t.datetime "updated_at"
-  end
-
-  create_table "subscriptions", force: :cascade do |t|
-    t.string   "first_name", limit: 255
-    t.string   "last_name",  limit: 255
-    t.string   "email",      limit: 255
-    t.integer  "partner_id"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-  end
-
-  create_table "topic_categories", force: :cascade do |t|
+    t.index ["action_page_id"], name: "index_partnerships_on_action_page_id"
+    t.index ["partner_id"], name: "index_partnerships_on_partner_id"
+  end
+
+  create_table "petitions", id: :serial, force: :cascade do |t|
+    t.string "title", limit: 255
+    t.text "description"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.integer "goal"
+    t.boolean "enable_affiliations", default: false
+  end
+
+  create_table "sessions", id: :serial, force: :cascade do |t|
+    t.string "session_id", null: false
+    t.text "data"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.index ["session_id"], name: "index_sessions_on_session_id", unique: true
+    t.index ["updated_at"], name: "index_sessions_on_updated_at"
+  end
+
+  create_table "signatures", id: :serial, force: :cascade do |t|
+    t.integer "petition_id"
+    t.integer "user_id"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.string "first_name", limit: 255
+    t.string "last_name", limit: 255
+    t.string "email", limit: 255
+    t.string "country_code", limit: 255
+    t.string "zipcode", limit: 255
+    t.string "street_address", limit: 255
+    t.string "city", limit: 255
+    t.string "state", limit: 255
+    t.boolean "anonymous", default: false
+    t.index ["petition_id"], name: "index_signatures_on_petition_id"
+    t.index ["user_id"], name: "index_signatures_on_user_id"
+  end
+
+  create_table "source_files", id: :serial, force: :cascade do |t|
+    t.string "file_name", limit: 255
+    t.string "file_content_type", limit: 255
+    t.integer "file_size"
+    t.string "key", limit: 255
+    t.string "bucket", limit: 255
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+  end
+
+  create_table "subscriptions", id: :serial, force: :cascade do |t|
+    t.string "first_name", limit: 255
+    t.string "last_name", limit: 255
+    t.string "email", limit: 255
+    t.integer "partner_id"
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+  end
+
+  create_table "topic_categories", id: :serial, force: :cascade do |t|
     t.string "name", limit: 255
   end
 
-  create_table "topic_sets", force: :cascade do |t|
+  create_table "topic_sets", id: :serial, force: :cascade do |t|
     t.integer "tier"
     t.integer "topic_category_id"
   end
 
-  create_table "topics", force: :cascade do |t|
-    t.string  "name",         limit: 255
+  create_table "topics", id: :serial, force: :cascade do |t|
+    t.string "name", limit: 255
     t.integer "topic_set_id"
   end
 
-  create_table "tweet_targets", force: :cascade do |t|
-    t.integer  "tweet_id",                       null: false
-    t.string   "twitter_id",         limit: 255, null: false
-    t.string   "bioguide_id",        limit: 255
-    t.string   "image_file_name",    limit: 255
-    t.string   "image_content_type", limit: 255
-    t.integer  "image_file_size"
-    t.datetime "image_updated_at"
-    t.index ["tweet_id"], name: "index_tweet_targets_on_tweet_id", using: :btree
-  end
-
-  create_table "tweets", force: :cascade do |t|
-    t.string  "target",        limit: 255
-    t.string  "message",       limit: 255
-    t.string  "cta",           limit: 255
-    t.string  "bioguide_id",   limit: 255
-    t.boolean "target_house",              default: true
-    t.boolean "target_senate",             default: true
-  end
-
-  create_table "user_preferences", force: :cascade do |t|
-    t.integer  "user_id",                null: false
-    t.string   "name",       limit: 255, null: false
-    t.string   "value",      limit: 255
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.index ["user_id"], name: "index_user_preferences_on_user_id", using: :btree
-  end
-
-  create_table "users", force: :cascade do |t|
-    t.string   "email",                  limit: 255, default: "",    null: false
-    t.string   "encrypted_password",     limit: 255, default: "",    null: false
-    t.string   "reset_password_token",   limit: 255
-    t.datetime "reset_password_sent_at"
-    t.datetime "remember_created_at"
-    t.integer  "sign_in_count",                      default: 0,     null: false
-    t.datetime "current_sign_in_at"
-    t.datetime "last_sign_in_at"
-    t.string   "current_sign_in_ip",     limit: 255
-    t.string   "last_sign_in_ip",        limit: 255
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string   "first_name",             limit: 255
-    t.string   "last_name",              limit: 255
-    t.string   "location",               limit: 255
-    t.boolean  "admin",                              default: false
-    t.string   "street_address",         limit: 255
-    t.string   "city",                   limit: 255
-    t.string   "state",                  limit: 255
-    t.string   "country_code",           limit: 255
-    t.string   "zipcode",                limit: 255
-    t.string   "phone",                  limit: 255
-    t.boolean  "record_activity",                    default: false
-    t.string   "confirmation_token",     limit: 255
-    t.datetime "confirmed_at"
-    t.datetime "confirmation_sent_at"
-    t.integer  "contact_id"
-    t.boolean  "subscribe",                          default: false
-    t.integer  "partner_id"
-    t.string   "unconfirmed_email",      limit: 255
-    t.integer  "failed_attempts",                    default: 0
-    t.string   "unlock_token",           limit: 255
-    t.datetime "locked_at"
-    t.boolean  "password_expired"
-    t.boolean  "collaborator",                       default: false, null: false
-    t.index ["confirmation_token"], name: "index_users_on_confirmation_token", unique: true, using: :btree
-    t.index ["email"], name: "index_users_on_email", unique: true, using: :btree
-    t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true, using: :btree
-    t.index ["unlock_token"], name: "index_users_on_unlock_token", unique: true, using: :btree
+  create_table "tweet_targets", id: :serial, force: :cascade do |t|
+    t.integer "tweet_id", null: false
+    t.string "twitter_id", limit: 255, null: false
+    t.string "bioguide_id", limit: 255
+    t.string "image_file_name", limit: 255
+    t.string "image_content_type", limit: 255
+    t.integer "image_file_size"
+    t.datetime "image_updated_at", precision: nil
+    t.index ["tweet_id"], name: "index_tweet_targets_on_tweet_id"
+  end
+
+  create_table "tweets", id: :serial, force: :cascade do |t|
+    t.string "target", limit: 255
+    t.string "message"
+    t.string "cta", limit: 255
+    t.string "bioguide_id", limit: 255
+    t.boolean "target_house", default: true
+    t.boolean "target_senate", default: true
+  end
+
+  create_table "user_preferences", id: :serial, force: :cascade do |t|
+    t.integer "user_id", null: false
+    t.string "name", limit: 255, null: false
+    t.string "value", limit: 255
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.index ["user_id"], name: "index_user_preferences_on_user_id"
+  end
+
+  create_table "users", id: :serial, force: :cascade do |t|
+    t.string "email", limit: 255, default: "", null: false
+    t.string "encrypted_password", limit: 255, default: "", null: false
+    t.string "reset_password_token", limit: 255
+    t.datetime "reset_password_sent_at", precision: nil
+    t.datetime "remember_created_at", precision: nil
+    t.integer "sign_in_count", default: 0, null: false
+    t.datetime "current_sign_in_at", precision: nil
+    t.datetime "last_sign_in_at", precision: nil
+    t.string "current_sign_in_ip", limit: 255
+    t.string "last_sign_in_ip", limit: 255
+    t.datetime "created_at", precision: nil
+    t.datetime "updated_at", precision: nil
+    t.string "first_name", limit: 255
+    t.string "last_name", limit: 255
+    t.string "location", limit: 255
+    t.boolean "admin", default: false
+    t.string "street_address", limit: 255
+    t.string "city", limit: 255
+    t.string "state", limit: 255
+    t.string "country_code", limit: 255
+    t.string "zipcode", limit: 255
+    t.string "phone", limit: 255
+    t.boolean "record_activity", default: false
+    t.string "confirmation_token", limit: 255
+    t.datetime "confirmed_at", precision: nil
+    t.datetime "confirmation_sent_at", precision: nil
+    t.integer "contact_id"
+    t.boolean "subscribe", default: false
+    t.integer "partner_id"
+    t.string "unconfirmed_email", limit: 255
+    t.integer "failed_attempts", default: 0
+    t.string "unlock_token", limit: 255
+    t.datetime "locked_at", precision: nil
+    t.boolean "password_expired"
+    t.boolean "collaborator", default: false, null: false
+    t.index ["confirmation_token"], name: "index_users_on_confirmation_token", unique: true
+    t.index ["email"], name: "index_users_on_email", unique: true
+    t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true
+    t.index ["unlock_token"], name: "index_users_on_unlock_token", unique: true
   end
 
   create_table "visits", id: :uuid, default: nil, force: :cascade do |t|
-    t.uuid     "visitor_id"
-    t.string   "ip",               limit: 255
-    t.text     "user_agent"
-    t.text     "referrer"
-    t.text     "landing_page"
-    t.integer  "user_id"
-    t.string   "referring_domain", limit: 255
-    t.string   "search_keyword",   limit: 255
-    t.string   "browser",          limit: 255
-    t.string   "os",               limit: 255
-    t.string   "device_type",      limit: 255
-    t.string   "country",          limit: 255
-    t.string   "region",           limit: 255
-    t.string   "city",             limit: 255
-    t.string   "utm_source",       limit: 255
-    t.string   "utm_medium",       limit: 255
-    t.string   "utm_term",         limit: 255
-    t.string   "utm_content",      limit: 255
-    t.string   "utm_campaign",     limit: 255
-    t.datetime "started_at"
-    t.index ["user_id"], name: "index_visits_on_user_id", using: :btree
+    t.uuid "visitor_id"
+    t.string "ip", limit: 255
+    t.text "user_agent"
+    t.text "referrer"
+    t.text "landing_page"
+    t.integer "user_id"
+    t.string "referring_domain", limit: 255
+    t.string "search_keyword", limit: 255
+    t.string "browser", limit: 255
+    t.string "os", limit: 255
+    t.string "device_type", limit: 255
+    t.string "country", limit: 255
+    t.string "region", limit: 255
+    t.string "city", limit: 255
+    t.string "utm_source", limit: 255
+    t.string "utm_medium", limit: 255
+    t.string "utm_term", limit: 255
+    t.string "utm_content", limit: 255
+    t.string "utm_campaign", limit: 255
+    t.datetime "started_at", precision: nil
+    t.index ["user_id"], name: "index_visits_on_user_id"
   end
 
 end
diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index 19fae2f96..95b447ae3 100755
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -10,7 +10,9 @@ if [ "$TEST_DB_AUTO_MIGRATE" == "true" ]; then
 fi
 
 # host ip needed by application for better_errors whitelisting to work
-export HOST_IP=`/sbin/ip route|awk '/default/ { print $3 }'`
+if [ "$RAILS_ENV" == "development" ]; then
+  export HOST_IP=`/sbin/ip route|awk '/default/ { print $3 }'`
+fi
 
 printenv | sed "s/^\([[:alnum:]_]*\)=\(.*\)$/export \1='\2'/" >/var/www/.profile
 
diff --git a/features/step_definitions/action_page_steps.rb b/features/step_definitions/action_page_steps.rb
index fc0969dfa..fe1045692 100644
--- a/features/step_definitions/action_page_steps.rb
+++ b/features/step_definitions/action_page_steps.rb
@@ -1,6 +1,6 @@
 Given(/^a congress message campaign exists$/) do
   stub_legislators
-  @action_page = FactoryGirl.create(:action_page_with_congress_message)
+  @action_page = FactoryBot.create(:action_page_with_congress_message)
 end
 
 When(/^I browse to an embedded action targetting Nancy Pelosi and Kamala Harris$/) do
@@ -49,7 +49,7 @@
 end
 
 Given(/^a petition action exists$/) do
-  @action_page = FactoryGirl.create(:petition).action_page
+  @action_page = FactoryBot.create(:petition).action_page
 end
 
 Given(/^local affiliations are allowed$/) do
@@ -58,13 +58,13 @@
 end
 
 Given(/^a local organizing campaign/) do
-  @action_page = FactoryGirl.create(:local_organizing_petition).action_page
+  @action_page = FactoryBot.create(:local_organizing_petition).action_page
 end
 
 Given(/^the petition has 100 signatures with affiliations/) do
   100.times {
-    signature = FactoryGirl.create(:signature, petition: @action_page.petition)
-    signature.affiliations << FactoryGirl.create(:affiliation, institution: @action_page.institutions.first)
+    signature = FactoryBot.create(:signature, petition: @action_page.petition)
+    signature.affiliations << FactoryBot.create(:affiliation, institution: @action_page.institutions.first)
   }
 end
 
diff --git a/features/step_definitions/active_record_steps.rb b/features/step_definitions/active_record_steps.rb
index f1baf8f42..fd52b45f5 100644
--- a/features/step_definitions/active_record_steps.rb
+++ b/features/step_definitions/active_record_steps.rb
@@ -1,4 +1,3 @@
-
 When /^there is a persisted ([\w:]+)$/ do |model|
   @persisted_records ||= []
   @persisted_records << Kernel.const_get(model).create!
diff --git a/features/step_definitions/admin/features_steps.rb b/features/step_definitions/admin/features_steps.rb
index 77a92cdb2..c6a708364 100644
--- a/features/step_definitions/admin/features_steps.rb
+++ b/features/step_definitions/admin/features_steps.rb
@@ -1,7 +1,5 @@
-
-
 Given(/^a petition exists with many signatures$/) do
-  @petition = FactoryGirl.create(:petition_complete_with_one_hundred_signatures)
+  @petition = FactoryBot.create(:petition_complete_with_one_hundred_signatures)
 end
 
 When(/^I visit the signatures list$/) do
diff --git a/features/step_definitions/congress_steps.rb b/features/step_definitions/congress_steps.rb
index b2f9d1938..1dfd9f06f 100644
--- a/features/step_definitions/congress_steps.rb
+++ b/features/step_definitions/congress_steps.rb
@@ -1,5 +1,5 @@
 Given(/^a congress member exists$/) do
-  member = FactoryGirl.create(:congress_member)
+  member = FactoryBot.create(:congress_member)
 end
 
 Given(/^a stubbed phantomdc$/) do
@@ -8,28 +8,32 @@
   proxy.stub(
     "#{Rails.application.config.congress_forms_url}/retrieve-form-elements", method: "post"
   ).and_return(
-    Proc.new { |params, headers, body| {
-      headers: { "Access-Control-Allow-Origin" => "*" },
-      json: {
-        :"#{body.last(7)}" => {
-          defunct: false,
-          contact_url: nil,
-          required_actions: [
-            { value: "$NAME_FIRST", maxlength: nil, options_hash: nil },
-            { value: "$NAME_LAST", maxlength: nil, options_hash: nil },
-            { value: "$EMAIL", maxlength: nil, options_hash: nil }
-          ]
+    Proc.new { |params, headers, body|
+      {
+        headers: { "Access-Control-Allow-Origin" => "*" },
+        json: {
+          :"#{body.last(7)}" => {
+            defunct: false,
+            contact_url: nil,
+            required_actions: [
+              { value: "$NAME_FIRST", maxlength: nil, options_hash: nil },
+              { value: "$NAME_LAST", maxlength: nil, options_hash: nil },
+              { value: "$EMAIL", maxlength: nil, options_hash: nil }
+            ]
+          }
         }
       }
-    } }
+    }
   )
 
   proxy.stub(
     "#{Rails.application.config.congress_forms_url}/fill-out-form", method: "post"
   ).and_return(
-    Proc.new { |params, headers, body| {
-      headers: { "Access-Control-Allow-Origin" => "*" },
-      json: { status: "success" }
-    } }
+    Proc.new { |params, headers, body|
+      {
+        headers: { "Access-Control-Allow-Origin" => "*" },
+        json: { status: "success" }
+      }
+    }
   )
 end
diff --git a/features/step_definitions/debug_steps.rb b/features/step_definitions/debug_steps.rb
index a6ecd1371..be3d98837 100644
--- a/features/step_definitions/debug_steps.rb
+++ b/features/step_definitions/debug_steps.rb
@@ -1,4 +1,3 @@
-
 When /^I byebug$/ do
   byebug
 end
diff --git a/features/step_definitions/partner_steps.rb b/features/step_definitions/partner_steps.rb
index a03056484..78b27f367 100644
--- a/features/step_definitions/partner_steps.rb
+++ b/features/step_definitions/partner_steps.rb
@@ -1,3 +1,3 @@
 Given(/^a partner named "(.*?)" with the code "(.*?)" exists$/) do |name, code|
-  @partner = FactoryGirl.create(:partner, name: name, code: code)
+  @partner = FactoryBot.create(:partner, name: name, code: code)
 end
diff --git a/features/step_definitions/source_file_steps.rb b/features/step_definitions/source_file_steps.rb
index 74127f530..a7bad345b 100644
--- a/features/step_definitions/source_file_steps.rb
+++ b/features/step_definitions/source_file_steps.rb
@@ -1,4 +1,3 @@
-
 When(/^there is an uploaded file named "([^\"]+)"$/) do |file_name|
   step "there is a persisted SourceFile with:", table(%{
     |file_name|#{file_name}|
diff --git a/features/step_definitions/topic_steps.rb b/features/step_definitions/topic_steps.rb
index 15e74c0c3..fa06ef395 100644
--- a/features/step_definitions/topic_steps.rb
+++ b/features/step_definitions/topic_steps.rb
@@ -1,4 +1,3 @@
-
 Then /^the topic set containing "([^\"]+)" should be tier ([\d]+)$/ do |topic, tier|
   topic_set = TopicSet.joins(:topics).where(topics: { name: topic }).take!
   expect(topic_set.tier).to eq(tier.to_i)
diff --git a/features/step_definitions/user_steps.rb b/features/step_definitions/user_steps.rb
index 62324726e..67372633c 100644
--- a/features/step_definitions/user_steps.rb
+++ b/features/step_definitions/user_steps.rb
@@ -1,15 +1,15 @@
 def setup_action
   @action_info = { title: "this is an important call",
-    summary: "blablabla",
-    description: "such bla, such bla" }
+                   summary: "blablabla",
+                   description: "such bla, such bla" }
 end
 
 def create_visitor
   @visitor ||= { name: "Test User",
-    email: "me@example.com",
-    zip_code: "94117",
-    password: "strong passwords defeat lobsters covering wealth",
-    password_confirmation: "strong passwords defeat lobsters covering wealth" }
+                 email: "me@example.com",
+                 zip_code: "94117",
+                 password: "strong passwords defeat lobsters covering wealth",
+                 password_confirmation: "strong passwords defeat lobsters covering wealth" }
 end
 
 def delete_user
@@ -20,13 +20,13 @@ def delete_user
 def create_activist_user
   create_visitor
   delete_user
-  @user = FactoryGirl.create(:activist_user, email: @visitor[:email], password: @visitor[:password])
+  @user = FactoryBot.create(:activist_user, email: @visitor[:email], password: @visitor[:password])
 end
 
 def create_community_member_user
   create_visitor
   delete_user
-  @user = FactoryGirl.create(:user, email: @visitor[:email], password: @visitor[:password])
+  @user = FactoryBot.create(:user, email: @visitor[:email], password: @visitor[:password])
 end
 
 def sign_in
@@ -38,26 +38,26 @@ def sign_in
 end
 
 def create_an_action_page_petition_needing_one_more_signature
-  @petition = FactoryGirl.create(:petition_with_99_signatures_needing_1_more)
+  @petition = FactoryBot.create(:petition_with_99_signatures_needing_1_more)
   @action_page = @petition.action_page
 end
 
 def create_a_call_campaign
-  @call_campaign = FactoryGirl.create(:call_campaign, call_campaign_id: senate_call_campaign_id)
+  @call_campaign = FactoryBot.create(:call_campaign, call_campaign_id: senate_call_campaign_id)
   @action_page = @call_campaign.action_page
 end
 
 def create_an_email_campaign
-  @email_campaign = FactoryGirl.create(:email_campaign)
+  @email_campaign = FactoryBot.create(:email_campaign)
   @action_page = @email_campaign.action_page
 end
 
 Given(/^a user with the email "(.*?)"$/) do |email|
-  FactoryGirl.create(:user, email: email)
+  FactoryBot.create(:user, email: email)
 end
 
 Given(/^an unconfirmed user with the email "(.*?)"$/) do |email|
-  FactoryGirl.create(:unconfirmed_user, email: email)
+  FactoryBot.create(:unconfirmed_user, email: email)
 end
 
 Given(/^I exist as an activist$/) do
@@ -339,11 +339,11 @@ def import_file_into_editor(name, content)
 
 Given(/^A tweet petition targeting senate exists$/) do
   setup_action
-  @tweet = FactoryGirl.create(:tweet_targeting_senate)
+  @tweet = FactoryBot.create(:tweet_targeting_senate)
   @action_page = @tweet.action_page
   @action_page.update_attributes(title: @action_info[:title],
-    summary: @action_info[:summary],
-    description: @action_info[:description])
+                                 summary: @action_info[:summary],
+                                 description: @action_info[:description])
 end
 
 Then(/^I see a button to lookup my reps$/) do
@@ -374,20 +374,20 @@ def import_file_into_editor(name, content)
 
 Given(/^a call petition targeting senate exists$/) do
   setup_action
-  @call_campaign = FactoryGirl.create(:call_campaign, call_campaign_id: senate_call_campaign_id, message: "hey hey")
+  @call_campaign = FactoryBot.create(:call_campaign, call_campaign_id: senate_call_campaign_id, message: "hey hey")
   @action_page = @call_campaign.action_page
   @action_page.update_attributes(title: @action_info[:title],
-    summary: @action_info[:summary],
-    description: @action_info[:description])
+                                 summary: @action_info[:summary],
+                                 description: @action_info[:description])
 end
 
 Given(/^a call petition targeting a custom number exists$/) do
   setup_action
-  @call_campaign = FactoryGirl.create(:call_campaign, call_campaign_id: custom_call_campaign_id, message: "hey hey")
+  @call_campaign = FactoryBot.create(:call_campaign, call_campaign_id: custom_call_campaign_id, message: "hey hey")
   @action_page = @call_campaign.action_page
   @action_page.update_attributes(title: @action_info[:title],
-    summary: @action_info[:summary],
-    description: @action_info[:description])
+                                 summary: @action_info[:summary],
+                                 description: @action_info[:description])
 end
 
 Then(/^I see form fields for phone number, address, and zip code$/) do
@@ -450,10 +450,10 @@ def this_machine_offline?
 Then(/^"(.*?)" should be signed up for mailings$/) do |email|
   email = email.sub("@", "%40")
   wait_until {
-    WebMock::WebMockMatcher.new(:post, CiviCRM::supporters_api_url).matches?(nil)
+    WebMock::WebMockMatcher.new(:post, Civicrm::supporters_api_url).matches?(nil)
   }
-  WebMock.should have_requested(:post, CiviCRM::supporters_api_url).
-    with(body: /.*#{email}.*/)
+  WebMock.should have_requested(:post, Civicrm::supporters_api_url)
+    .with(body: /.*#{email}.*/)
 end
 
 Then(/^I should not have signed up for mailings$/) do
diff --git a/features/support/env.rb b/features/support/env.rb
index 2c6c90e38..66cf97fd8 100644
--- a/features/support/env.rb
+++ b/features/support/env.rb
@@ -51,11 +51,11 @@
 
 # Remove/comment out the lines below if your app doesn't have a database.
 # For some databases (like MongoDB and CouchDB) you may need to use :truncation instead.
-begin
-  DatabaseCleaner.strategy = :transaction
-rescue NameError
-  raise "You need to add database_cleaner to your Gemfile (in the :test group) if you wish to use it."
-end
+# begin
+#   DatabaseCleaner.strategy = :transaction
+# rescue NameError
+#   raise "You need to add database_cleaner to your Gemfile (in the :test group) if you wish to use it."
+# end
 
 # You may also want to configure DatabaseCleaner to use different strategies for certain features and scenarios.
 # See the DatabaseCleaner documentation for details. Example:
diff --git a/lib/amazon_credentials.rb b/lib/amazon_credentials.rb
deleted file mode 100644
index 17840b5cb..000000000
--- a/lib/amazon_credentials.rb
+++ /dev/null
@@ -1,32 +0,0 @@
-module AmazonCredentials
-  # This module is primarily for paperclip config
-  def amazon_credentials
-    bucket_url_options = {}
-    bucket_url_options = {
-      s3_host_alias: Rails.application.secrets.amazon_bucket_url,
-      url: ":s3_alias_url",
-      path: "/:class/:attachment/:id_partition/:style/:filename"
-    } unless Rails.application.secrets.amazon_bucket_url.nil?
-
-    {
-      storage: Rails.application.secrets.storage.to_sym,
-      s3_credentials: {
-        bucket: Rails.application.secrets.amazon_bucket,
-        access_key_id: Rails.application.secrets.amazon_access_key_id,
-        secret_access_key: Rails.application.secrets.amazon_secret_access_key
-      },
-      s3_region: Rails.application.secrets.amazon_region,
-      s3_host_name: build_s3_host_name,
-      s3_protocol: "https",
-      default_url: ""
-    }.merge(bucket_url_options)
-  end
-
-  def build_s3_host_name
-    AmazonCredentials.build_s3_host_name
-  end
-
-  def self.build_s3_host_name
-    "s3-" + Rails.application.secrets.amazon_region + ".amazonaws.com"
-  end
-end
diff --git a/lib/monkey_patches/octet_stream_override.rb b/lib/monkey_patches/octet_stream_override.rb
deleted file mode 100644
index f8a95ffa8..000000000
--- a/lib/monkey_patches/octet_stream_override.rb
+++ /dev/null
@@ -1,37 +0,0 @@
-# Monkeypatch for paperclip to continue working post Rails 5 fileupload changes
-#
-# Without this, the following error occurs when trying to change the image
-# attached to a particular record:
-#   Content Type Spoof: Filename img_file.png (binary/octet-stream from Headers,
-#   ["image/png"] from Extension), content type discovered from file command: image/png.
-#
-# Additionally, this only allows paperclip to interact with image files
-#
-# The class we're patching is here: https://github.com/thoughtbot/paperclip/blob/fbdcbe8da30138dac5500e4291e7b279491d1316/lib/paperclip/media_type_spoof_detector.rb
-
-module MonkeyPatches
-  module OctetStreamOverride
-    def spoofed?
-      return true unless is_image?
-      override_header_type if supplied_content_type == "binary/octet-stream"
-      if has_name? && has_extension? && media_type_mismatch? && mapping_override_mismatch?
-        Paperclip.log("Content Type Spoof: Filename #{File.basename(@name)} (#{supplied_content_type} from Headers, #{content_types_from_name.map(&:to_s)} from Extension), content type discovered from file command: #{calculated_content_type}. See documentation to allow this combination.")
-        true
-      else
-        false
-      end
-    end
-
-    private
-
-    def is_image?
-      return true if /\Aimage\/.*\Z/.match? calculated_content_type
-      Paperclip.log("Attempted non-image upload: Filename #{File.basename(@name)} (#{supplied_content_type}")
-      false
-    end
-
-    def override_header_type
-      @content_type = calculated_content_type
-    end
-  end
-end
diff --git a/lib/quotes.rb b/lib/quotes.rb
deleted file mode 100644
index 1ac906603..000000000
--- a/lib/quotes.rb
+++ /dev/null
@@ -1,15 +0,0 @@
-module Quotes
-  def self.get
-    quotes.sample
-  end
-
-  private
-
-  def self.quotes
-    begin
-      @quotes ||= YAML.load_file("config/custom_quotes.yml")
-    rescue Errno::ENOENT
-      @quotes ||= YAML.load_file("config/quotes.yml")
-    end
-  end
-end
diff --git a/lib/tasks/congress.rake b/lib/tasks/congress.rake
index cbf8b5967..9b26a577f 100644
--- a/lib/tasks/congress.rake
+++ b/lib/tasks/congress.rake
@@ -1,4 +1,3 @@
-
 namespace :congress do
   desc "Create/update records of Congress members and their contact info"
   task update: :environment do
@@ -15,36 +14,38 @@ namespace :congress do
 
     legislator_sources.each do |repo|
       data = RestClient.get(repo)
-      YAML.load(data).each do |info|
+      YAML.safe_load(data).each do |info|
         term = info["terms"].last
         next if term["start"] < "2011-01-01" # don't get too historical
 
         full_name = info["name"]["official_full"] || "#{info['name']['first']} #{info['name']['last']}"
 
         attributes = {
-          full_name:   full_name,
-          first_name:  info["name"]["first"],
-          last_name:   info["name"]["last"],
+          full_name: full_name,
+          first_name: info["name"]["first"],
+          last_name: info["name"]["last"],
           bioguide_id: info["id"]["bioguide"],
-          phone:       term["phone"],
-          term_end:    term["end"],
-          chamber:     term["type"] == "sen" ? "senate" : "house",
-          state:       term["state"],
-          district:    term["district"].try(:to_s)
+          phone: term["phone"],
+          term_end: term["end"],
+          chamber: term["type"] == "sen" ? "senate" : "house",
+          state: term["state"],
+          district: term["district"].try(:to_s)
         }
 
-        CongressMember.
-          find_or_initialize_by(bioguide_id: info["id"]["bioguide"]).
-          update_attributes!(attributes)
+        CongressMember
+          .find_or_initialize_by(bioguide_id: info["id"]["bioguide"])
+          .update!(attributes)
       end
 
-      legislator_social_media_sources.each do |repo|
-        data = RestClient.get(repo)
-        YAML.load(data).each do |info|
-          next unless twitter_id = info["social"]["twitter"]
-          CongressMember.
-            where(bioguide_id: info["id"]["bioguide"]).
-            update_all(twitter_id: twitter_id)
+      legislator_social_media_sources.each do |s_repo|
+        data = RestClient.get(s_repo)
+        YAML.safe_load(data).each do |info|
+          twitter_id = info["social"]["twitter"]
+          next unless twitter_id
+
+          CongressMember
+            .where(bioguide_id: info["id"]["bioguide"])
+            .update_all(twitter_id: twitter_id)
         end
       end
     end
diff --git a/lib/tasks/cucumber.rake b/lib/tasks/cucumber.rake
deleted file mode 100644
index 8387e041b..000000000
--- a/lib/tasks/cucumber.rake
+++ /dev/null
@@ -1,63 +0,0 @@
-# IMPORTANT: This file is generated by cucumber-rails - edit at your own peril.
-# It is recommended to regenerate this file in the future when you upgrade to a
-# newer version of cucumber-rails. Consider adding your own code to a new file
-# instead of editing this one. Cucumber will automatically load all features/**/*.rb
-# files.
-
-unless ARGV.any? { |a| a =~ /^gems/ } # Don't load anything when running the gems:* tasks
-
-vendored_cucumber_bin = Dir["#{Rails.root}/vendor/{gems,plugins}/cucumber*/bin/cucumber"].first
-$LOAD_PATH.unshift(File.dirname(vendored_cucumber_bin) + "/../lib") unless vendored_cucumber_bin.nil?
-
-begin
-  require "cucumber/rake/task"
-
-  namespace :cucumber do
-    Cucumber::Rake::Task.new({ ok: "test:prepare" }, "Run features that should pass") do |t|
-      t.binary = vendored_cucumber_bin # If nil, the gem's binary is used.
-      t.fork = true # You may get faster startup if you set this to false
-      t.profile = "default"
-    end
-
-    Cucumber::Rake::Task.new({ wip: "test:prepare" }, "Run features that are being worked on") do |t|
-      t.binary = vendored_cucumber_bin
-      t.fork = true # You may get faster startup if you set this to false
-      t.profile = "wip"
-    end
-
-    Cucumber::Rake::Task.new({ rerun: "test:prepare" }, "Record failing features and run only them if any exist") do |t|
-      t.binary = vendored_cucumber_bin
-      t.fork = true # You may get faster startup if you set this to false
-      t.profile = "rerun"
-    end
-
-    desc "Run all features"
-    task all: [:ok, :wip]
-
-    task :statsetup do
-      require "rails/code_statistics"
-      ::STATS_DIRECTORIES << %w(Cucumber\ features features) if File.exist?("features")
-      ::CodeStatistics::TEST_TYPES << "Cucumber features" if File.exist?("features")
-    end
-  end
-  desc "Alias for cucumber:ok"
-  task cucumber: "cucumber:ok"
-
-  task default: :cucumber
-
-  task features: :cucumber do
-    STDERR.puts "*** The 'features' task is deprecated. See rake -T cucumber ***"
-  end
-
-  # In case we don't have the generic Rails test:prepare hook, append a no-op task that we can depend upon.
-  task "test:prepare" do
-  end
-
-  task stats: "cucumber:statsetup"
-rescue LoadError
-  desc "cucumber rake task not available (cucumber not installed)"
-  task :cucumber do
-    abort "Cucumber rake task is not available. Be sure to install cucumber as a gem or plugin"
-  end
-end
-end
diff --git a/lib/tasks/petition.rake b/lib/tasks/petition.rake
index 2575f6ec9..2c8e3ca84 100644
--- a/lib/tasks/petition.rake
+++ b/lib/tasks/petition.rake
@@ -22,11 +22,11 @@ end
 namespace :petition do
   desc "Create a local organizing petition with 99 signatures"
   task create_local: :environment do
-    petition = FactoryGirl.create(:local_organizing_petition)
+    petition = FactoryBot.create(:local_organizing_petition)
 
     (0..98).each do |i|
-      petition.signatures << FactoryGirl.build(:signature, petition: petition)
-      petition.signatures.last.affiliations << FactoryGirl.build(
+      petition.signatures << FactoryBot.build(:signature, petition: petition)
+      petition.signatures.last.affiliations << FactoryBot.build(
         :affiliation,
         institution: petition.action_page.institutions[i % 10],
         affiliation_type: petition.action_page.affiliation_types[i % 5]
@@ -39,19 +39,19 @@ namespace :petition do
     Petition.all.each do |petition|
       goal = petition.goal
       count = petition.signatures.count
-      if count > goal
-        if goal == goals.last
-          petition.goal = 100000 if count > 70000
-        elsif goal < goals.last
-          petition.goal = next_goal(petition.goal)
-        end
+      next unless count > goal
 
-        if petition.changed?
-          petition.save
-          print "Petition #{petition.id} updated. Goal: #{petition.goal}\n"
-          # TODO: email admins
-        end
+      if goal == goals.last
+        petition.goal = 100_000 if count > 70000
+      elsif goal < goals.last
+        petition.goal = next_goal(petition.goal)
       end
+
+      next unless petition.changed?
+
+      petition.save
+      print "Petition #{petition.id} updated. Goal: #{petition.goal}\n"
+      # TODO: email admins
     end
   end
 end
diff --git a/lib/tasks/signatures.rake b/lib/tasks/signatures.rake
index b16f22c47..b8eebb6c2 100644
--- a/lib/tasks/signatures.rake
+++ b/lib/tasks/signatures.rake
@@ -2,17 +2,18 @@ namespace :signatures do
   desc "Fill in US States from zipcodes"
   task fill_us_states: :environment do
     Signature.where(country_code: "US").where("zipcode is not NULL").each do |sig|
-      if sig.city.blank? and sig.state.blank? and GoingPostal.valid_zipcode?(sig.zipcode, "US")
-        begin
-          if city_state = SmartyStreets.get_city_state(sig.zipcode)
-            sig.city = city_state["city"]
-            sig.state = city_state["state"]
-            sig.save
-            puts "Updated: #{sig.inspect}"
-          end
-        rescue
-          puts "Lookup failed for signature #{sig.id}"
-        end
+      next unless sig.city.blank? && sig.state.blank? && GoingPostal.valid_zipcode?(sig.zipcode, "US")
+
+      begin
+        city_state = SmartyStreets.get_city_state(sig.zipcode)
+        next unless city_state
+
+        sig.city = city_state["city"]
+        sig.state = city_state["state"]
+        sig.save
+        puts "Updated: #{sig.inspect}"
+      rescue StandardError
+        puts "Lookup failed for signature #{sig.id}"
       end
     end
   end
@@ -24,7 +25,7 @@ namespace :signatures do
     end.compact
     sig_dups.each do |email, petition_id|
       Signature.where(petition_id: petition_id, email: email)
-        .order(:created_at).drop(1).map(&:delete)
+               .order(:created_at).drop(1).map(&:delete)
     end
 
     sub_dups = Subscription.group(:email, :partner_id).count.map do |data, count|
diff --git a/lib/tasks/test.rake b/lib/tasks/test.rake
deleted file mode 100644
index 049ca5093..000000000
--- a/lib/tasks/test.rake
+++ /dev/null
@@ -1,4 +0,0 @@
-desc "Run sass-lint"
-task :sass_lint do
-  system("node_modules/.bin/sass-lint -vq") && puts("No sass linting errors!  Woo!")
-end
diff --git a/lib/tasks/users.rake b/lib/tasks/users.rake
index f186adbc1..21825e07d 100644
--- a/lib/tasks/users.rake
+++ b/lib/tasks/users.rake
@@ -1,15 +1,13 @@
 namespace :users do
   desc "List the emails of all admin accounts"
   task list_admins: :environment do
-    admins = User.where(admin: true).map do |u|
-      u.email
-    end.sort
+    admins = User.where(admin: true).map(&:email).sort
     puts admins.empty? ? "No Admin Users" : admins
   end
 
   desc "Remove admin status from an account, given an email"
-  task :remove_admin, [:email] => :environment do |t, args|
-    u = User.find_by_email(args[:email])
+  task :remove_admin, [:email] => :environment do |_t, args|
+    u = User.find_by(email: args[:email])
     abort("I couldn't find a user with the email '#{args[:email]}'.") unless u
 
     u.admin = false
@@ -17,9 +15,9 @@ namespace :users do
   end
 
   desc "Add admin status from an account, given an email"
-  task :add_admin, [:email] => :environment do |t, args|
+  task :add_admin, [:email] => :environment do |_t, args|
     email = args[:email]
-    u = User.find_by_email(email)
+    u = User.find_by(email: email)
     abort("I couldn't find a user with the email '#{email}'.") unless u
 
     u.admin = true
diff --git a/lib/tasks/webshims_asset_compile.rake b/lib/tasks/webshims_asset_compile.rake
deleted file mode 100644
index f6ddb9fce..000000000
--- a/lib/tasks/webshims_asset_compile.rake
+++ /dev/null
@@ -1,40 +0,0 @@
-# Rails4 doesn't create un-fingerprinted assets anymore, but we
-# need a couple for webshims inclusion. Let's try to hook in and make
-# symlinks.
-
-require "pathname"
-
-# Every time assets:precompile is called, trigger webshims:create_non_digest_assets afterwards.
-Rake::Task["assets:precompile"].enhance do
-  Rake::Task["webshims:create_non_digest_assets"].invoke
-end
-
-namespace :webshims do
-  # This seems to be basically how ordinary asset precompile
-  # is logging, ugh.
-  logger = Logger.new($stderr)
-
-  # Based on suggestion at https://github.com/rails/sprockets-rails/issues/49#issuecomment-20535134
-  # but limited to files in webshims namespaced asset directories.
-  task create_non_digest_assets: :"assets:environment" do
-    manifest_path = Dir.glob(File.join(Rails.root, "public/assets/.sprockets-manifest-*.json")).first
-    manifest_data = JSON.load(File.new(manifest_path)) # rubocop:disable Security/JSONLoad
-
-    manifest_data["assets"].each do |logical_path, digested_path|
-      logical_pathname = Pathname.new logical_path
-
-      if ["webshims/**/*"].any? { |testpath| logical_pathname.fnmatch?(testpath, File::FNM_PATHNAME) }
-        full_digested_path    = Rails.root.join("public/assets", digested_path)
-        full_nondigested_path = Rails.root.join("public/assets", logical_path)
-
-        logger.info "(Webshims) Copying to #{full_nondigested_path}"
-
-        # Use FileUtils.copy_file with true third argument to copy
-        # file attributes (eg mtime) too, as opposed to FileUtils.cp
-        # Making symlnks with FileUtils.ln_s would be another option, not
-        # sure if it would have unexpected issues.
-        FileUtils.copy_file full_digested_path, full_nondigested_path, true
-      end
-    end
-  end
-end
diff --git a/spec/controllers/action_page_controller_spec.rb b/spec/controllers/action_page_controller_spec.rb
index a4b51b512..80b35edd0 100644
--- a/spec/controllers/action_page_controller_spec.rb
+++ b/spec/controllers/action_page_controller_spec.rb
@@ -1,19 +1,15 @@
 require "rails_helper"
 
 RSpec.describe ActionPageController, type: :controller do
-  include Devise::Test::ControllerHelpers
-
-  let(:action_page) { FactoryGirl.create :action_page }
-  let(:admin) { login_as_admin }
-  let(:collaborator) { login_as_collaborator }
+  let(:action_page) { FactoryBot.create :action_page }
 
   describe "GET #index" do
     render_views
 
     it "filters by category" do
       action_page
-      category = FactoryGirl.create(:category, title: "Privacy")
-      privacy_action_page = FactoryGirl.create(:action_page, category: category)
+      category = FactoryBot.create(:category, title: "Privacy")
+      privacy_action_page = FactoryBot.create(:action_page, category: category)
       get :index, params: { category: "Privacy" }
       expect(assigns(:actionPages)).to contain_exactly(privacy_action_page)
     end
@@ -21,7 +17,7 @@
     it "returns json" do
       action_page
       get :index, params: { format: "json" }
-      expect(response.content_type).to eq("application/json")
+      expect(response.content_type).to eq("application/json; charset=utf-8")
       expect(response.body).to include(action_page.title)
     end
   end
@@ -42,19 +38,19 @@
     end
 
     it "redirects to an admin specified url if redirect is enabled" do
-      action_page = FactoryGirl.create :action_page,
-                      enable_redirect: true,
-                      redirect_url: "https://example.com"
+      action_page = FactoryBot.create :action_page,
+                                      enable_redirect: true,
+                                      redirect_url: "https://example.com"
       get :show, params: { id: action_page }
       expect(response).to redirect_to "https://example.com"
     end
 
     context "archived" do
-      let(:active_action_page) { FactoryGirl.create :action_page }
-      let(:archived_action_page) {
-        FactoryGirl.create :archived_action_page,
-        active_action_page_for_redirect: active_action_page
-      }
+      let(:active_action_page) { FactoryBot.create :action_page }
+      let(:archived_action_page) do
+        FactoryBot.create :archived_action_page,
+                          active_action_page_for_redirect: active_action_page
+      end
 
       it "redirects archived actions to active actions" do
         get :show, params: { id: archived_action_page }
@@ -62,29 +58,29 @@
       end
 
       it "doesn't redirect away from victories" do
-        archived_action_page.update_attributes(victory: true)
+        archived_action_page.update(victory: true)
         get :show, params: { id: archived_action_page }
         expect(response.status).to eq(200)
       end
     end
 
     context "unpublished" do
-      let(:unpublished_action_page) { FactoryGirl.create :action_page, published: false }
+      let(:unpublished_action_page) { FactoryBot.create :action_page, published: false }
 
       it "hides unpublished pages from unprivileged users" do
-        expect {
+        expect do
           get :show, params: { id: unpublished_action_page }
-        }.to raise_error ActiveRecord::RecordNotFound
+        end.to raise_error ActiveRecord::RecordNotFound
       end
 
       it "notifies admin users that a page is unpublished" do
-        admin
+        sign_in FactoryBot.create(:admin_user)
         get :show, params: { id: unpublished_action_page }
         expect(flash[:notice]).to include("not published")
       end
 
       it "notifies collaborator users that a page is unpublished" do
-        collaborator
+        sign_in FactoryBot.create(:collaborator_user)
         get :show, params: { id: unpublished_action_page }
         expect(flash[:notice]).to include("not published")
       end
@@ -94,30 +90,30 @@
   describe "GET #show_by_institution" do
     before(:each) do
       # Petition with two institutions
-      @petition = FactoryGirl.create(:local_organizing_petition)
+      @petition = FactoryBot.create(:local_organizing_petition)
       @actionPage = @petition.action_page
-      @actionPage.institutions << FactoryGirl.create(:institution)
+      @actionPage.institutions << FactoryBot.create(:institution)
 
       # Signature with affiliations to two different institutions
-      signature = FactoryGirl.create(:signature,
-        petition: @petition)
-      signature.affiliations << FactoryGirl.create(:affiliation,
-        institution: @actionPage.institutions.first)
-      signature.affiliations << FactoryGirl.create(:affiliation,
-        institution: @actionPage.institutions.last)
+      signature = FactoryBot.create(:signature,
+                                    petition: @petition)
+      signature.affiliations << FactoryBot.create(:affiliation,
+                                                  institution: @actionPage.institutions.first)
+      signature.affiliations << FactoryBot.create(:affiliation,
+                                                  institution: @actionPage.institutions.last)
 
       # Signature with an affiliation to the second institutions
-      signature = FactoryGirl.create(:signature,
-        petition: @petition)
-      signature.affiliations << FactoryGirl.create(:affiliation,
-        institution: @actionPage.institutions.last,
-        affiliation_type: @actionPage.affiliation_types.first)
+      signature = FactoryBot.create(:signature,
+                                    petition: @petition)
+      signature.affiliations << FactoryBot.create(:affiliation,
+                                                  institution: @actionPage.institutions.last,
+                                                  affiliation_type: @actionPage.affiliation_types.first)
     end
 
     context "html" do
       it "assigns signatures filtered by institution" do
         get :show_by_institution, params: { id: @actionPage.id,
-          institution_id: @actionPage.institutions.first.id }
+                                            institution_id: @actionPage.institutions.first.id }
         expect(assigns(:institution)).to eq(@actionPage.institutions.first)
 
         # it should assign signatures associated with the institution
diff --git a/spec/controllers/admin/institutions_controller_spec.rb b/spec/controllers/admin/institutions_controller_spec.rb
index 36fbbc72e..d892fea7e 100644
--- a/spec/controllers/admin/institutions_controller_spec.rb
+++ b/spec/controllers/admin/institutions_controller_spec.rb
@@ -1,22 +1,18 @@
 require "rails_helper"
 
 RSpec.describe Admin::InstitutionsController, type: :controller do
-  include Devise::Test::ControllerHelpers
-
   # This should return the minimal set of attributes required to create a valid
   # Admin::Institution. As you add validations to Admin::InstitutionSet, be sure to
   # adjust the attributes here as well.
-  let(:valid_attributes) {
+  let(:valid_attributes) do
     { name: "San Francisco State University", category: "University" }
-  }
+  end
 
   before(:each) do
-    # Admin login
-    @request.env["devise.mapping"] = Devise.mappings[:admin]
-    sign_in FactoryGirl.create(:admin_user)
+    sign_in FactoryBot.create(:admin_user)
 
     # Set parent action
-    @actionPage = FactoryGirl.create(:action_page_with_petition)
+    @actionPage = FactoryBot.create(:action_page_with_petition)
   end
 
   describe "GET #index" do
@@ -30,18 +26,18 @@
   describe "POST #create" do
     context "with valid params" do
       it "creates a new institution" do
-        expect {
+        expect do
           post :create, params: { action_page_id: @actionPage.id,
-            institution: valid_attributes }
-        }.to change(Institution, :count).by(1)
+                                  institution: valid_attributes }
+        end.to change(Institution, :count).by(1)
       end
 
       it "does not create duplicate institutions" do
-        institution = Institution.create! valid_attributes
-        expect {
+        Institution.create! valid_attributes
+        expect do
           post :create, params: { action_page_id: @actionPage.id,
-            institution: valid_attributes }
-        }.to_not change(Institution, :count)
+                                  institution: valid_attributes }
+        end.to_not change(Institution, :count)
       end
     end
   end
@@ -57,26 +53,26 @@
     end
 
     context "with valid csv" do
-      let(:file) { fixture_file_upload("files/schools.csv") }
+      let(:file) { fixture_file_upload("schools.csv") }
 
       it "queues a job" do
         expect { import }.to change(Delayed::Job, :count).by(1)
       end
 
       it "uploads institutions" do
-        expect(Institution).
-          to receive(:import).with(
-               "University",
-               ["University of California, Berkeley",
-                "University of California, Davis",
-                "University of California, Santa Cruz"]
-             )
+        expect(Institution)
+          .to receive(:import).with(
+            "University",
+            ["University of California, Berkeley",
+             "University of California, Davis",
+             "University of California, Santa Cruz"]
+          )
         import_and_work_off
       end
     end
 
     context "with an invalid csv" do
-      let(:file) { fixture_file_upload("files/bad_schools.csv") }
+      let(:file) { fixture_file_upload("bad_schools.csv") }
 
       it "does not upload institutions" do
         expect(Institution).not_to receive(:import)
@@ -92,9 +88,9 @@
   describe "DELETE #destroy" do
     it "deletes the institution" do
       institution = Institution.create! valid_attributes
-      expect {
+      expect do
         delete :destroy, params: { id: institution.to_param }
-      }.to change(Institution, :count).by(-1)
+      end.to change(Institution, :count).by(-1)
     end
   end
 end
diff --git a/spec/controllers/admin/petitions_controller_spec.rb b/spec/controllers/admin/petitions_controller_spec.rb
index 86788eb7a..5e7c8092a 100644
--- a/spec/controllers/admin/petitions_controller_spec.rb
+++ b/spec/controllers/admin/petitions_controller_spec.rb
@@ -1,15 +1,12 @@
 require "rails_helper"
 
 RSpec.describe Admin::PetitionsController, type: :controller do
-  include Devise::Test::ControllerHelpers
-
   before(:each) do
-    @request.env["devise.mapping"] = Devise.mappings[:admin]
-    sign_in FactoryGirl.create(:admin_user)
+    sign_in FactoryBot.create(:admin_user)
   end
 
   describe "GET #show" do
-    let(:petition) { FactoryGirl.create(:petition) }
+    let(:petition) { FactoryBot.create(:petition) }
 
     it "assigns @signatures" do
       get :show, params: { id: petition.id, action_page_id: petition.action_page.id }
@@ -17,11 +14,11 @@
       expect(response.status).to eq(200)
     end
 
-    it "passes the 'query' param through Signature.filter" do
+    it "passes the 'query' param through Signature.search" do
       query = "jo@example.com"
 
       expect(Petition).to receive(:find) { petition }
-      expect(petition.signatures).to receive(:filter) do |q|
+      expect(petition.signatures).to receive(:search) do |q|
         expect(q).to eq(query)
         Signature.all
       end
@@ -32,13 +29,13 @@
   end
 
   describe "DELETE #destroy_signatures" do
-    let(:petition) { FactoryGirl.create(:petition) }
+    let(:petition) { FactoryBot.create(:petition) }
     let(:signatures) do
-      30.times.map { FactoryGirl.create(:signature, petition: petition) }
+      30.times.map { FactoryBot.create(:signature, petition: petition) }
     end
 
     it "should delete signatures from the signature_ids param" do
-      delete :destroy_signatures, params: { id: petition.id, signature_ids: signatures[10..-1].map(&:id) }
+      delete :destroy_signatures, params: { id: petition.id, signature_ids: signatures[10..].map(&:id) }
       expect(petition.signatures.reload).to contain_exactly(*signatures[0..9])
       expect(response).to redirect_to(admin_action_page_petition_path(petition.action_page, petition))
     end
diff --git a/spec/controllers/admin/users_controller_spec.rb b/spec/controllers/admin/users_controller_spec.rb
index 419152a63..bc6640262 100644
--- a/spec/controllers/admin/users_controller_spec.rb
+++ b/spec/controllers/admin/users_controller_spec.rb
@@ -1,9 +1,7 @@
 require "rails_helper"
 
 RSpec.describe Admin::UsersController, type: :controller do
-  include Devise::Test::ControllerHelpers
-
-  before { login_as_admin }
+  before { sign_in FactoryBot.create(:admin_user) }
 
   describe "GET #index" do
     it "returns http success" do
@@ -14,7 +12,7 @@
 
   describe "PATCH #update" do
     it "redirects" do
-      patch :update, params: { id: FactoryGirl.create(:collaborator_user), user: { collaborator: "1" } }
+      patch :update, params: { id: FactoryBot.create(:collaborator_user), user: { collaborator: "1" } }
       expect(response).to have_http_status(:found)
     end
   end
diff --git a/spec/controllers/concerns/logged_invisible_captcha_spec.rb b/spec/controllers/concerns/logged_invisible_captcha_spec.rb
index 7af02623c..bcbbd5d20 100644
--- a/spec/controllers/concerns/logged_invisible_captcha_spec.rb
+++ b/spec/controllers/concerns/logged_invisible_captcha_spec.rb
@@ -9,11 +9,11 @@ def create; end
 
   it "blocks requests that fill the honeypot" do
     expect(controller).not_to receive(:create)
-    post :create, foo: "bar"
+    post :create, params: { foo: "bar" }
   end
 
   it "logs spammy requests to Sentry" do
     expect(Raven).to receive(:capture_message)
-    post :create, foo: "bar"
+    post :create, params: { foo: "bar" }
   end
 end
diff --git a/spec/controllers/concerns/request_origin_validation_spec.rb b/spec/controllers/concerns/request_origin_validation_spec.rb
index 64361b79f..842d22e8f 100644
--- a/spec/controllers/concerns/request_origin_validation_spec.rb
+++ b/spec/controllers/concerns/request_origin_validation_spec.rb
@@ -58,8 +58,8 @@
 
       it "should raise an error for POST requests" do
         request["post?"] = true
-        expect { controller.verify_request_origin }.
-          to raise_error(ActionController::InvalidCrossOriginRequest)
+        expect { controller.verify_request_origin }
+          .to raise_error(ActionController::InvalidCrossOriginRequest)
       end
     end
   end
diff --git a/spec/controllers/subscriptions_controller_spec.rb b/spec/controllers/subscriptions_controller_spec.rb
index 384937958..2031e6189 100644
--- a/spec/controllers/subscriptions_controller_spec.rb
+++ b/spec/controllers/subscriptions_controller_spec.rb
@@ -31,26 +31,25 @@
   end
 
   describe "#edit" do
-    let(:subscription) { FactoryGirl.create(:subscription) }
+    let(:subscription) { FactoryBot.create(:subscription) }
     subject { get :edit, params: { id: subscription } }
 
     it "redirects to supporters" do
-      sign_in FactoryGirl.create(:user)
-      expect(subject).to redirect_to(/#{Rails.application.secrets.supporters["host"]}/)
+      sign_in FactoryBot.create(:user)
+      expect(subject).to redirect_to(/#{Rails.application.secrets.supporters[:host]}/)
     end
 
     describe "without a successful connection to civicrm" do
       before do
-        stub_request(:post, CiviCRM::supporters_api_url).
-          and_return(status: 400, body: "{}", headers: {})
+        stub_request(:post, Civicrm.supporters_api_url)
+          .and_return(status: 400, body: "{}", headers: {})
       end
 
       it "fails gracefully" do
-        sign_in FactoryGirl.create(:user)
+        sign_in FactoryBot.create(:user)
         expect(subject).to redirect_to("/account")
         expect(flash[:error]).to be_present
       end
     end
   end
-
 end
diff --git a/spec/controllers/tools_controller_spec.rb b/spec/controllers/tools_controller_spec.rb
index 4379d151b..1782c00ea 100644
--- a/spec/controllers/tools_controller_spec.rb
+++ b/spec/controllers/tools_controller_spec.rb
@@ -1,17 +1,19 @@
 require "rails_helper"
 
 RSpec.describe ToolsController, type: :controller do
-  let(:valid_attributes) { {
-    signature: {
-      "petition_id" => "1",
-      "email" => "rob@eff.org",
-      "first_name" => "adsf",
-      "last_name" => "asdf",
-      "zipcode" => "94109",
-      "city" => "",
-      "country_code" => ""
+  let(:valid_attributes) do
+    {
+      signature: {
+        "petition_id" => "1",
+        "email" => "rob@eff.org",
+        "first_name" => "adsf",
+        "last_name" => "asdf",
+        "zipcode" => "94109",
+        "city" => "",
+        "country_code" => ""
+      }
     }
-  } }
+  end
 
   before(:each) do
     stub_smarty_streets
@@ -45,33 +47,63 @@
 
   describe "#call" do
     it "should CallTool#campaign_call, passing parameters in" do
-      call_campaign = FactoryGirl.create(:call_campaign)
+      call_campaign = FactoryBot.create(:call_campaign)
 
       expect(CallTool).to receive(:campaign_call)
       post :call, params: {
-             phone: "000-000-0000",
-             location: "00000",
-             call_campaign_id: call_campaign.id,
-             action_id: call_campaign.action_page.id
-           }
+        phone: "000-000-0000",
+        location: "00000",
+        call_campaign_id: call_campaign.id,
+        action_id: call_campaign.action_page.id
+      }
     end
   end
 
   describe "#email" do
-    let(:email_campaign) { FactoryGirl.create(:email_campaign) }
+    let(:custom_email_campaign) { FactoryBot.create(:email_campaign) }
+    let(:state_email_campaign) { FactoryBot.create(:email_campaign, :state_leg) }
+
+    it "should redirect to ActionPage#service_uri(service) if email has custom recipients" do
+      service = "gmail"
+      uri = "https://composeurl.example.com"
+      allow_any_instance_of(EmailCampaign).to receive(:service_uri).with(service).and_return(uri)
+      get :email, params: { action_id: custom_email_campaign.action_page.id, service: service }
+      expect(response).to redirect_to(uri)
+    end
 
-    it "should redirect to ActionPage#service_uri(service)" do
-      service, uri = "gmail", "https://composeurl.example.com"
-      expect(ActionPage).to receive(:find_by_id) { email_campaign.action_page }
-      expect(email_campaign).to receive(:service_uri).with(service) { uri }
-      get :email, params: { action_id: email_campaign.action_page.id, service: service }
+    it "should redirect to ActionPage#service_uri(service, params[:state_rep_email]) if email goes through state legislator lookup" do
+      service = "gmail"
+      state_rep_email = "state_rep@example.com"
+      uri = "https://composeurl.example.com"
+      allow_any_instance_of(EmailCampaign).to receive(:service_uri).with(service, { email: state_rep_email }) { uri }
+      get :email, params: { action_id: state_email_campaign.action_page.id, state_rep_email: state_rep_email, service: service }
       expect(response).to redirect_to(uri)
     end
   end
+
+  describe "#state_reps" do
+    let(:email_campaign) { FactoryBot.create(:email_campaign, :state_leg) }
+    let(:address) { "815 Eddy St 94109" }
+    let(:json_parseable_state_officials) { '{"officials": [{"name": "Sponge Bob", "party": "Sandy Party", "emails": ["spongebob@clarinetfans.annoying"]}]}' }
+
+    before do
+      Rails.application.config.google_civic_api_url = "http://civic.example.com"
+      Rails.application.secrets.google_civic_api_key = "test-key-for-civic-api"
+
+      stub_request(:get, "http://civic.example.com/?address=%20&includeOffices=true&key=test-key-for-civic-api&levels=administrativeArea1&roles=legislatorUpperBody")
+        .to_return(status: 200, body: json_parseable_state_officials, headers: {})
+    end
+
+    it "should render JSON with the state officials array" do
+      get :state_reps, params: { email_campaign_id: email_campaign.action_page.email_campaign_id }
+
+      expect(response).to have_http_status(200)
+    end
+  end
 end
 
 def create_signature_and_have_user_sign
-  @petition = FactoryGirl.create(:petition_with_99_signatures_needing_1_more)
+  @petition = FactoryBot.create(:petition_with_99_signatures_needing_1_more)
   post :petition, params: { signature: valid_attributes[:signature].merge({ "petition_id" => @petition.id.to_s }) }
 end
 
diff --git a/spec/factories/action_page.rb b/spec/factories/action_page.rb
index 1ef32505e..f79f03795 100644
--- a/spec/factories/action_page.rb
+++ b/spec/factories/action_page.rb
@@ -1,52 +1,52 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :action_page do
-    title "Sample Action Page"
-    summary "not filling in summary"
-    description "not filling desc in"
-    published true
-    email_text "$NAME, thanks for taking action!"
-    victory_message "We won"
+    title { "Sample Action Page" }
+    summary { "not filling in summary" }
+    description { "not filling desc in" }
+    published { true }
+    email_text { "$NAME, thanks for taking action!" }
+    victory_message { "We won" }
 
     trait :with_partner do
-      after(:create) do |action_page, evaluator|
-        action_page.partners << FactoryGirl.create(:partner)
+      after(:create) do |action_page, _evaluator|
+        action_page.partners << FactoryBot.create(:partner)
       end
     end
   end
 
   factory :action_page_with_petition, parent: :action_page do
-    enable_petition true
+    enable_petition { true }
   end
 
   factory :action_page_with_tweet, parent: :action_page do
-    enable_tweet true
+    enable_tweet { true }
   end
 
   factory :action_page_with_call, parent: :action_page do
-    enable_call true
+    enable_call { true }
   end
 
   factory :action_page_with_email, parent: :action_page do
-    enable_email true
+    enable_email { true }
   end
 
   factory :action_page_with_congress_message, parent: :action_page do
-    enable_congress_message true
+    enable_congress_message { true }
     congress_message_campaign
   end
 
   factory :archived_action_page, parent: :action_page do
-    archived true
+    archived { true }
     association :active_action_page_for_redirect, factory: :action_page
-    victory false
+    victory { false }
   end
 
   factory :action_page_with_views, parent: :action_page do
-    after(:build) do |action_page, evaluator|
+    after(:build) do |action_page, _evaluator|
       10.times do |n|
-        FactoryGirl.create(:ahoy_view,
-                           action_page: action_page,
-                           time: Time.zone.now - n.days)
+        FactoryBot.create(:ahoy_view,
+                          action_page: action_page,
+                          time: Time.zone.now - n.days)
       end
     end
   end
diff --git a/spec/factories/affiliation_types.rb b/spec/factories/affiliation_types.rb
index df1b7ca42..8967288c5 100644
--- a/spec/factories/affiliation_types.rb
+++ b/spec/factories/affiliation_types.rb
@@ -1,5 +1,5 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :affiliation_type do
-    name "Student"
+    name { "Student" }
   end
 end
diff --git a/spec/factories/affiliations.rb b/spec/factories/affiliations.rb
index 615d9c889..2b6ec65fa 100644
--- a/spec/factories/affiliations.rb
+++ b/spec/factories/affiliations.rb
@@ -1,4 +1,4 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :affiliation do
     institution
     affiliation_type
diff --git a/spec/factories/ahoy_event.rb b/spec/factories/ahoy_event.rb
index d8d0b1311..e76aaba5f 100644
--- a/spec/factories/ahoy_event.rb
+++ b/spec/factories/ahoy_event.rb
@@ -1,21 +1,25 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :ahoy_view, class: Ahoy::Event do
     id { SecureRandom.uuid }
-    name "View"
-    properties { {
-      type: "action",
-      actionType: "view"
-    } }
-    time Time.zone.now
+    name { "View" }
+    properties do
+      {
+        type: "action",
+        actionType: "view"
+      }
+    end
+    time { Time.zone.now }
   end
 
   factory :ahoy_signature, class: Ahoy::Event do
     id { SecureRandom.uuid }
-    name "Action"
-    properties { {
-      type: "action",
-      actionType: "signature"
-    } }
-    time Time.zone.now
+    name { "Action" }
+    properties do
+      {
+        type: "action",
+        actionType: "signature"
+      }
+    end
+    time { Time.zone.now }
   end
 end
diff --git a/spec/factories/call_campaigns.rb b/spec/factories/call_campaigns.rb
index 63e4b61b4..fdbcebdcc 100644
--- a/spec/factories/call_campaigns.rb
+++ b/spec/factories/call_campaigns.rb
@@ -1,10 +1,10 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :call_campaign do
-    title "a call campaign"
-    call_campaign_id 1
+    title { "a call campaign" }
+    call_campaign_id { 1 }
 
     after(:create) do |campaign|
-      FactoryGirl.create(:action_page_with_call, call_campaign_id: campaign.id)
+      FactoryBot.create(:action_page_with_call, call_campaign_id: campaign.id)
     end
   end
 end
diff --git a/spec/factories/categories.rb b/spec/factories/categories.rb
index 0c5b53a1a..e9de41bf0 100644
--- a/spec/factories/categories.rb
+++ b/spec/factories/categories.rb
@@ -1,5 +1,5 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :category do
-    title "Free Speech"
+    title { "Free Speech" }
   end
 end
diff --git a/spec/factories/congress_member.rb b/spec/factories/congress_member.rb
index 5fb948655..8f91bb380 100644
--- a/spec/factories/congress_member.rb
+++ b/spec/factories/congress_member.rb
@@ -1,12 +1,12 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :congress_member do
     sequence(:bioguide_id) { |n| "A00000#{n}" }
-    term_end (Time.now + 1.year).strftime("%Y-%m-%d")
-    full_name "Alice Mars"
-    first_name "Alice"
-    last_name "Mars"
-    twitter_id "AliceMars"
-    chamber "senate"
-    state "CA"
+    term_end { (Time.zone.now + 1.year).strftime("%Y-%m-%d") }
+    full_name { "Alice Mars" }
+    first_name { "Alice" }
+    last_name { "Mars" }
+    twitter_id { "AliceMars" }
+    chamber { "senate" }
+    state { "CA" }
   end
 end
diff --git a/spec/factories/congress_message.rb b/spec/factories/congress_message.rb
index 0dd0740fc..99216d7eb 100644
--- a/spec/factories/congress_message.rb
+++ b/spec/factories/congress_message.rb
@@ -1,22 +1,22 @@
-FactoryGirl.define do
+FactoryBot.define do
   form1 = CongressForms::Form.new("C000880", [
-            { "value" => "$NAME_FIRST" },
-            { "value" => "$NAME_LAST" },
-            { "value" => "$ADDRESS_STATE", "options_hash" => {
-                "CALIFORNIA" => "CA",
-                "NEW YORK" => "NY"
-            } }
-          ])
+                                    { "value" => "$NAME_FIRST" },
+                                    { "value" => "$NAME_LAST" },
+                                    { "value" => "$ADDRESS_STATE", "options_hash" => {
+                                      "CALIFORNIA" => "CA",
+                                      "NEW YORK" => "NY"
+                                    } }
+                                  ])
 
   form2 = CongressForms::Form.new("C000881", [
-            { "value" => "$ADDRESS_CITY" },
-            { "value" => "$ADDRESS_STATE", "options_hash" => {
-                "CALIFORNIA" => "CA",
-                "NEW YORK" => "NY"
-            } }
-          ])
+                                    { "value" => "$ADDRESS_CITY" },
+                                    { "value" => "$ADDRESS_STATE", "options_hash" => {
+                                      "CALIFORNIA" => "CA",
+                                      "NEW YORK" => "NY"
+                                    } }
+                                  ])
 
   factory :congress_message do
-    forms [form1, form2]
+    forms { [form1, form2] }
   end
 end
diff --git a/spec/factories/congress_message_campaigns.rb b/spec/factories/congress_message_campaigns.rb
index 528955ab5..3c314d0dc 100644
--- a/spec/factories/congress_message_campaigns.rb
+++ b/spec/factories/congress_message_campaigns.rb
@@ -1,15 +1,15 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :congress_message_campaign do
-    subject "a subject"
-    message "a message"
-    campaign_tag "a campaign tag"
+    subject { "a subject" }
+    message { "a message" }
+    campaign_tag { "a campaign tag" }
 
     trait :targeting_bioguide_ids do
-      target_bioguide_ids "C000880"
+      target_bioguide_ids { "C000880" }
     end
 
     trait :targeting_senate do
-      target_house false
+      target_house { false }
     end
   end
 end
diff --git a/spec/factories/email_campaigns.rb b/spec/factories/email_campaigns.rb
index 5f0de73ad..c230a86fc 100644
--- a/spec/factories/email_campaigns.rb
+++ b/spec/factories/email_campaigns.rb
@@ -1,11 +1,17 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :email_campaign do
-    email_addresses "a@example.com, b@example.com"
-    subject "a subject"
-    message "a message"
+    subject { "hey hey hey" }
+    message { "hello world" }
+    email_addresses { "a@example.com, b@example.com" }
+
+    trait :state_leg do
+      email_addresses { "" }
+      state { "CA" }
+      target_state_upper_chamber { true }
+    end
 
     after(:create) do |campaign|
-      FactoryGirl.create(:action_page_with_email, email_campaign_id: campaign.id)
+      FactoryBot.create(:action_page_with_email, email_campaign_id: campaign.id)
     end
   end
 end
diff --git a/spec/factories/institutions.rb b/spec/factories/institutions.rb
index ca2d6f692..59c1d5a98 100644
--- a/spec/factories/institutions.rb
+++ b/spec/factories/institutions.rb
@@ -1,6 +1,6 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :institution do
     sequence(:name) { |n| "University of Wherever #{n}" }
-    category "University"
+    category { "University" }
   end
 end
diff --git a/spec/factories/partners.rb b/spec/factories/partners.rb
index e1e870999..e8ecb57ce 100644
--- a/spec/factories/partners.rb
+++ b/spec/factories/partners.rb
@@ -1,6 +1,6 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :partner do
-    name "Another Activist Org"
+    name { "Another Activist Org" }
     sequence(:code) { |n| "p#{n}" }
   end
 end
diff --git a/spec/factories/petitions.rb b/spec/factories/petitions.rb
index 8c6972415..0249666e1 100644
--- a/spec/factories/petitions.rb
+++ b/spec/factories/petitions.rb
@@ -1,38 +1,38 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :petition do
-    sequence(:title)      { |n| "petition-#{n}" }
-    description "A sample Petition"
-    goal 100
+    sequence(:title) { |n| "petition-#{n}" }
+    description { "A sample Petition" }
+    goal { 100 }
 
     after(:create) do |petition|
-      FactoryGirl.create(:action_page_with_petition, petition_id: petition.id)
+      FactoryBot.create(:action_page_with_petition, petition_id: petition.id)
     end
   end
 
   factory :petition_complete_with_one_hundred_signatures, parent: :petition do
     after(:create) do |petition|
-      100.times { petition.signatures << FactoryGirl.build(:signature, petition_id: petition.id) }
+      100.times { petition.signatures << FactoryBot.build(:signature, petition_id: petition.id) }
     end
   end
 
   factory :petition_with_99_signatures_needing_1_more, parent: :petition do
     after(:create) do |petition|
-      99.times { petition.signatures << FactoryGirl.build(:signature, petition_id: petition.id) }
+      99.times { petition.signatures << FactoryBot.build(:signature, petition_id: petition.id) }
     end
   end
 
   factory :petition_complete_with_one_thousand_signatures, parent: :petition do
     after(:create) do |petition|
-      1000.times { petition.signatures << FactoryGirl.build(:signature, petition_id: petition.id) }
+      1000.times { petition.signatures << FactoryBot.build(:signature, petition_id: petition.id) }
     end
   end
 
   factory :local_organizing_petition, parent: :petition do
-    enable_affiliations true
+    enable_affiliations { true }
 
     after(:create) do |petition|
-      petition.action_page.institutions << FactoryGirl.build(:institution)
-      petition.action_page.affiliation_types << FactoryGirl.build(:affiliation_type)
+      petition.action_page.institutions << FactoryBot.build(:institution)
+      petition.action_page.affiliation_types << FactoryBot.build(:affiliation_type)
     end
   end
 end
diff --git a/spec/factories/signatures.rb b/spec/factories/signatures.rb
index 5a3926cf2..6839a0663 100644
--- a/spec/factories/signatures.rb
+++ b/spec/factories/signatures.rb
@@ -1,13 +1,17 @@
-FactoryGirl.define do
+FactoryBot.define do
+  sequence :signer_email do |n|
+    "signer-#{n}@example.com"
+  end
+
   factory :signature do
-    first_name "John"
-    last_name "Doe"
-    sequence(:email) { |n| "signer-#{n}@example.com" }
-    country_code "US"
-    zipcode "94109"
-    street_address "815 Eddy St"
-    city "San Francisco"
-    state "California"
-    anonymous false
+    first_name { "John" }
+    last_name { "Doe" }
+    email { generate(:signer_email) }
+    country_code { "US" }
+    zipcode { "94109" }
+    street_address { "815 Eddy St" }
+    city { "San Francisco" }
+    state { "California" }
+    anonymous { false }
   end
 end
diff --git a/spec/factories/source_file.rb b/spec/factories/source_file.rb
index 269e2f568..310f29c46 100644
--- a/spec/factories/source_file.rb
+++ b/spec/factories/source_file.rb
@@ -1,6 +1,6 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :source_file do
-    key "uploaded_files/meh.jpg"
+    key { "uploaded_files/meh.jpg" }
 
     to_create { |instance| instance.save(validate: false) } # skip before filters
   end
diff --git a/spec/factories/subscriptions.rb b/spec/factories/subscriptions.rb
index 07a442937..f247a6f23 100644
--- a/spec/factories/subscriptions.rb
+++ b/spec/factories/subscriptions.rb
@@ -1,7 +1,7 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :subscription do
-    first_name "John"
-    last_name "Doe"
+    first_name { "John" }
+    last_name { "Doe" }
     sequence(:email) { |n| "signer-#{n}@example.com" }
     partner { |a| a.association :partner }
   end
diff --git a/spec/factories/topic.rb b/spec/factories/topic.rb
index b914813fc..7b9a5e6f3 100644
--- a/spec/factories/topic.rb
+++ b/spec/factories/topic.rb
@@ -1,4 +1,4 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :topic do
     sequence(:name) { |n| "Vampire#{n}" }
   end
diff --git a/spec/factories/topic_category.rb b/spec/factories/topic_category.rb
index 061dbae76..1ae77fd8a 100644
--- a/spec/factories/topic_category.rb
+++ b/spec/factories/topic_category.rb
@@ -1,8 +1,8 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :topic_category do
-    name "Demons"
+    name { "Demons" }
 
-    after(:create) do |category, evaluator|
+    after(:create) do |category, _evaluator|
       create_list(:topic_set, 2, topic_category: category)
     end
   end
diff --git a/spec/factories/topic_set.rb b/spec/factories/topic_set.rb
index 7a5a2d571..ed7171a49 100644
--- a/spec/factories/topic_set.rb
+++ b/spec/factories/topic_set.rb
@@ -1,8 +1,8 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :topic_set do
     sequence(:tier) { |n| n }
 
-    after(:create) do |set, evaluator|
+    after(:create) do |set, _evaluator|
       create_list(:topic, 2, topic_set: set)
     end
   end
diff --git a/spec/factories/tweets.rb b/spec/factories/tweets.rb
index f3737878c..5f6285821 100644
--- a/spec/factories/tweets.rb
+++ b/spec/factories/tweets.rb
@@ -1,13 +1,13 @@
-FactoryGirl.define do
+FactoryBot.define do
   factory :tweet do
-    message "Please protect my right to use the Internet safely"
+    message { "Please protect my right to use the Internet safely" }
 
     after(:create) do |tweet|
-      FactoryGirl.create(:action_page_with_tweet, tweet_id: tweet.id)
+      FactoryBot.create(:action_page_with_tweet, tweet_id: tweet.id)
     end
   end
 
   factory :tweet_targeting_senate, parent: :tweet do
-    target_senate true
+    target_senate { true }
   end
 end
diff --git a/spec/factories/users.rb b/spec/factories/users.rb
index 2dc8954c4..efb6f8609 100644
--- a/spec/factories/users.rb
+++ b/spec/factories/users.rb
@@ -1,15 +1,13 @@
 # Read about factories at https://github.com/thoughtbot/factory_girl
 
-FactoryGirl.define do
+FactoryBot.define do
   factory :unconfirmed_user, class: User do
     sequence(:email, ActiveRecord::Base.connection.table_exists?("users") ? User.next_id : 0) { |n| "person_#{n}@example.com" }
-    password "strong passwords defeat lobsters covering wealth"
+    password { "strong passwords defeat lobsters covering wealth" }
   end
 
   factory :user, parent: :unconfirmed_user do
-    after(:build) do |user|
-      user.skip_confirmation!
-    end
+    after(:build, &:skip_confirmation!)
   end
 
   factory :admin_user, parent: :user do
diff --git a/spec/features/action_pages/call_action_spec.rb b/spec/features/action_pages/call_action_spec.rb
index 2c09c4baa..4959eefee 100644
--- a/spec/features/action_pages/call_action_spec.rb
+++ b/spec/features/action_pages/call_action_spec.rb
@@ -1,15 +1,15 @@
 require "rails_helper"
 
-RSpec.feature "Call actions", type: :feature, js: true do
+RSpec.describe "Call actions", type: :system, js: true do
   let!(:action) do
-    FactoryGirl.create(:call_campaign).action_page
+    FactoryBot.create(:call_campaign).action_page
   end
   let!(:calltool_request) do
     {
-       "objects" => [{ "id" => 1, "name" => "call someone", "status" => "live" }],
-       "required_fields" => { "userLocation" => "" },
-       "page" => 1,
-       "total_pages" => 1
+      "objects" => [{ "id" => 1, "name" => "call someone", "status" => "live" }],
+      "required_fields" => { "userLocation" => "" },
+      "page" => 1,
+      "total_pages" => 1
     }.to_json
   end
 
diff --git a/spec/features/action_pages/congress_action_spec.rb b/spec/features/action_pages/congress_action_spec.rb
index 7dc267a68..0d668008a 100644
--- a/spec/features/action_pages/congress_action_spec.rb
+++ b/spec/features/action_pages/congress_action_spec.rb
@@ -1,16 +1,16 @@
 require "rails_helper"
 
-RSpec.feature "Congress actions", type: :feature, js: true do
+RSpec.describe "Congress actions", type: :system, js: true do
   let!(:action) do
-    FactoryGirl.create(:action_page_with_congress_message)
+    FactoryBot.create(:action_page_with_congress_message)
   end
-  let!(:members) {
-    [FactoryGirl.create(:congress_member,
-                        twitter_id: "sisko",
-                        state: "CA", bioguide_id: "C000880"),
-     FactoryGirl.create(:congress_member, state: "CA", bioguide_id: "A000360")]
-  }
-  let(:location) {
+  let!(:members) do
+    [FactoryBot.create(:congress_member,
+                       twitter_id: "sisko",
+                       state: "CA", bioguide_id: "C000880"),
+     FactoryBot.create(:congress_member, state: "CA", bioguide_id: "A000360")]
+  end
+  let(:location) do
     OpenStruct.new(success: true,
                    street: "1630 Ravello Drive",
                    city: "Sunnydale",
@@ -18,16 +18,16 @@
                    zip4: 1234,
                    state: "CA",
                    district: 10)
-  }
+  end
 
   before do
     allow(SmartyStreets).to receive(:get_location).and_return(location)
-    stub_request(:post, /retrieve-form-elements/).
-      with(body: { "bio_ids" => ["C000880", "A000360"] }).
-      and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
-    stub_request(:post, /retrieve-form-elements/).
-      with(body: { "bio_ids" => ["", "C000880", "A000360"] }).
-      and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
+    stub_request(:post, /retrieve-form-elements/)
+      .with(body: { "bio_ids" => %w[C000880 A000360] })
+      .and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
+    stub_request(:post, /retrieve-form-elements/)
+      .with(body: { "bio_ids" => ["", "C000880", "A000360"] })
+      .and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
     stub_request(:post, /fill-out-form/).and_return(status: 200, body: "{}")
   end
 
diff --git a/spec/features/action_pages/custom_email_action_spec.rb b/spec/features/action_pages/custom_email_action_spec.rb
new file mode 100644
index 000000000..0f1ccec33
--- /dev/null
+++ b/spec/features/action_pages/custom_email_action_spec.rb
@@ -0,0 +1,14 @@
+require "rails_helper"
+
+RSpec.describe "Custom email actions", type: :system, js: true do
+  let!(:custom_action) do
+    FactoryBot.create(:email_campaign).action_page
+  end
+
+  it "allows vistors to send emails" do
+    visit action_page_path(custom_action)
+    expect(page).not_to have_content("Thank You!")
+    click_on "Use default mail client"
+    expect(page).to have_content("Thank You!")
+  end
+end
diff --git a/spec/features/action_pages/email_action_spec.rb b/spec/features/action_pages/email_action_spec.rb
deleted file mode 100644
index 31a464955..000000000
--- a/spec/features/action_pages/email_action_spec.rb
+++ /dev/null
@@ -1,13 +0,0 @@
-require "rails_helper"
-
-RSpec.feature "Email actions", type: :feature, js: true do
-  let!(:action) do
-    FactoryGirl.create(:email_campaign).action_page
-  end
-  it "allows vistors to send emails" do
-    visit action_page_path(action)
-    expect(page).not_to have_content("THANK YOU!")
-    click_on "Use default mail client"
-    expect(page).to have_content("THANK YOU!")
-  end
-end
diff --git a/spec/features/action_pages/petition_action_spec.rb b/spec/features/action_pages/petition_action_spec.rb
index b206605b2..dee8383f1 100644
--- a/spec/features/action_pages/petition_action_spec.rb
+++ b/spec/features/action_pages/petition_action_spec.rb
@@ -1,8 +1,8 @@
 require "rails_helper"
 
-RSpec.feature "Petition actions", type: :feature, js: true do
+RSpec.describe "Petition actions", type: :system, js: true do
   let!(:action) do
-    FactoryGirl.create(:petition).action_page
+    FactoryBot.create(:petition).action_page
   end
   let(:location) { OpenStruct.new(city: "Sunnydale", state: "CA") }
 
diff --git a/spec/features/action_pages/state_leg_email_action_spec.rb b/spec/features/action_pages/state_leg_email_action_spec.rb
new file mode 100644
index 000000000..d7a56cf94
--- /dev/null
+++ b/spec/features/action_pages/state_leg_email_action_spec.rb
@@ -0,0 +1,28 @@
+require "rails_helper"
+
+RSpec.describe "State legislator email actions", type: :system, js: true do
+  let!(:state_action) do
+    FactoryBot.create(:email_campaign, :state_leg).action_page
+  end
+  let(:json_parseable_state_officials) { '{"officials": [{"name": "Sponge Bob", "party": "Sandy Party", "emails": ["spongebob@clarinetfans.annoying"]}]}' }
+
+  before do
+    Rails.application.config.google_civic_api_url = "http://civic.example.com"
+    Rails.application.secrets.google_civic_api_key = "test-key-for-civic-api"
+
+    stub_request(:get, "http://civic.example.com/?address=815%20Eddy%20St%2094109&includeOffices=true&key=test-key-for-civic-api&levels=administrativeArea1&roles=legislatorUpperBody")
+      .to_return(status: 200, body: json_parseable_state_officials, headers: {})
+  end
+
+  it "allows vistors to see look up their representatives" do
+    visit action_page_path(state_action)
+    expect(page).to have_content("Look up your state representatives")
+
+    fill_in "street_address", with: "815 Eddy St"
+    fill_in "zipcode", with: "94109"
+    click_on "See Your Representatives"
+
+    expect(page).to have_content("Sponge Bob")
+    expect(page).not_to have_content("Thank You!")
+  end
+end
diff --git a/spec/features/action_pages/tweet_action_spec.rb b/spec/features/action_pages/tweet_action_spec.rb
index a61ff43b8..ebf067cab 100644
--- a/spec/features/action_pages/tweet_action_spec.rb
+++ b/spec/features/action_pages/tweet_action_spec.rb
@@ -1,16 +1,16 @@
 require "rails_helper"
 
-RSpec.feature "Tweet actions", type: :feature, js: true do
+RSpec.describe "Tweet actions", type: :system, js: true do
   let!(:tweet_action) do
-    FactoryGirl.create(:tweet, message: "Default message").action_page
+    FactoryBot.create(:tweet, message: "Default message").action_page
   end
-  let!(:members) {
-    [FactoryGirl.create(:congress_member,
-                        twitter_id: "sisko",
-                        state: "CA", bioguide_id: "C000880"),
-     FactoryGirl.create(:congress_member, state: "CA", bioguide_id: "A000360")]
-  }
-  let(:location) {
+  let!(:members) do
+    [FactoryBot.create(:congress_member,
+                       twitter_id: "sisko",
+                       state: "CA", bioguide_id: "C000880"),
+     FactoryBot.create(:congress_member, state: "CA", bioguide_id: "A000360")]
+  end
+  let(:location) do
     OpenStruct.new(success: true,
                    street: "1630 Ravello Drive",
                    city: "Sunnydale",
@@ -18,7 +18,7 @@
                    zip4: 1234,
                    state: "CA",
                    district: 10)
-  }
+  end
 
   before do
     allow(SmartyStreets).to receive(:get_location).and_return(location)
@@ -26,15 +26,11 @@
 
   it "allows vistors to tweet at representatives" do
     visit action_page_path(tweet_action)
-
     expect(page).not_to have_content("THANK YOU!")
     fill_in "street_address", with: "1630 Ravello Drive"
     fill_in "zipcode", with: "94109"
     click_on "Look up your reps"
-
-    expect(page).to have_content("Default message")
     click_on "Tweet @sisko"
-
     expect(page).to have_content("THANK YOU!")
   end
 end
diff --git a/spec/features/admin/action_creation_spec.rb b/spec/features/admin/action_creation_spec.rb
index ec9fc701e..ec147be89 100644
--- a/spec/features/admin/action_creation_spec.rb
+++ b/spec/features/admin/action_creation_spec.rb
@@ -1,28 +1,26 @@
 require "rails_helper"
 
 RSpec.describe "Admin action page creation", type: :feature, js: true do
-  before { sign_in_user(FactoryGirl.create(:admin_user)) }
-  let!(:category) { FactoryGirl.create(:category, title: "Privacy") }
+  before { sign_in_user(FactoryBot.create(:admin_user)) }
+  let!(:category) { FactoryBot.create(:category, title: "Privacy") }
   it "can create tweet actions" do
     visit new_admin_action_page_path
     fill_in_basic_info(title: "Very Important Action",
                        summary: "A summary",
                        description: "A description")
-    click_on "Next"
+    next_section
 
     select_action_type("tweet")
     fill_in "Message", with: "A message"
-    click_on "Next"
+    next_section
 
-    skip_image_selection
+    skip_banner_selection
     fill_in_social_media
-    # Skip partners
-    click_on "Next"
 
-    tempermental {
+    tempermental do
       click_button "Save"
       expect(page).to have_content("Very Important Action", wait: 10)
-    }
+    end
   end
 
   it "can create basic petition actions" do
@@ -30,47 +28,68 @@
     fill_in_basic_info(title: "Very Important Action",
                        summary: "A summary",
                        description: "A description")
-    click_on "Next"
+    next_section
 
     select_action_type("petition")
     fill_in_editor "#action_page_petition_attributes_description",
-      with: "A petititon letter"
+                   with: "A petititon letter"
     fill_in "Goal", with: 1000
-    click_on "Next"
+    next_section
 
-    skip_image_selection
+    skip_banner_selection
     fill_in_social_media
-    # Skip partners
-    click_on "Next"
 
-    tempermental {
+    tempermental do
       click_button "Save"
       expect(page).to have_content("Very Important Action", wait: 10)
-    }
+    end
   end
 
-  it "can create email actions" do
+  it "can create custom email actions" do
     visit new_admin_action_page_path
     fill_in_basic_info(title: "Very Important Action",
                        summary: "A summary",
                        description: "A description")
+    next_section
+
+    select_action_type("email")
+    fill_in "Subject", with: "Subject"
+    fill_in "Message", with: "An email"
+    fill_in "Or enter custom email addresses below:", with: "test@gmail.com"
+    next_section
+
+    skip_banner_selection
+    fill_in_social_media
+
+    tempermental do
+      click_button "Save"
+      expect(page).to have_content("Very Important Action", wait: 10)
+    end
+  end
+
+  it "can create state-level email actions" do
+    visit new_admin_action_page_path
+    fill_in_basic_info(title: "State-Level Leg Action",
+                       summary: "A summary",
+                       description: "A description")
     click_on "Next"
 
     select_action_type("email")
-    fill_in "To", with: "test@gmail.com"
     fill_in "Subject", with: "Subject"
     fill_in "Message", with: "An email"
+
+    select("CA", from: "action_page_email_campaign_attributes_state")
+    find("#action_page_email_campaign_attributes_target_state_upper_chamber").ancestor("label").click
+
     click_on "Next"
 
-    skip_image_selection
+    skip_banner_selection
     fill_in_social_media
-    # Skip partners
-    click_on "Next"
 
-    tempermental {
+    tempermental do
       click_button "Save"
-      expect(page).to have_content("Very Important Action", wait: 10)
-    }
+      expect(page).to have_content("State-Level Leg Action", wait: 10)
+    end
   end
 
   it "can create congress actions" do
@@ -78,22 +97,20 @@
     fill_in_basic_info(title: "Very Important Action",
                        summary: "A summary",
                        description: "A description")
-    click_on "Next"
+    next_section
 
     select_action_type("congress_message")
     fill_in "Subject", with: "Subject"
     fill_in "Message", with: "A message"
-    click_on "Next"
+    next_section
 
-    skip_image_selection
+    skip_banner_selection
     fill_in_social_media
-    # Skip partners
-    click_on "Next"
 
-    tempermental {
+    tempermental do
       click_button "Save"
       expect(page).to have_content("Very Important Action", wait: 10)
-    }
+    end
   end
 
   it "can create call actions" do
@@ -101,42 +118,82 @@
     fill_in_basic_info(title: "Very Important Action",
                        summary: "A summary",
                        description: "A description")
-    click_on "Next"
+    next_section
 
     select_action_type "call"
     fill_in_editor "#action_page_call_campaign_attributes_message",
-      with: "Call script"
-    click_on "Next"
+                   with: "Call script"
+    next_section
 
-    skip_image_selection
+    skip_banner_selection
     fill_in_social_media
-    # Skip partners
-    click_on "Next"
 
-    tempermental {
+    tempermental do
       click_button "Save"
       expect(page).to have_content("Very Important Action", wait: 10)
-    }
+    end
+  end
+
+  it "can add images" do
+    stub_request(:get, %r{uploads/featured-image.png}).to_return(status: 200, body: fixture_file_upload("test-image.png", "image/png").tempfile.to_io, headers: {})
+    stub_request(:any, %r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/featured-image.png}).to_return(status: 200, body: "", headers: {})
+    stub_request(:get, %r{uploads/og-image.png}).to_return(status: 200, body: fixture_file_upload("test-image.png", "image/png").tempfile.to_io, headers: {})
+    stub_request(:any, %r{/action_pages/og_images/([0-9]+)/([0-9]+)/([0-9]+)/original/og-image.png}).to_return(status: 200, body: "", headers: {})
+    FactoryBot.create(:source_file, key: "uploads/featured-image.png", file_name: "featured-image.png")
+    FactoryBot.create(:source_file, key: "uploads/og-image.png", file_name: "og-image.png")
+    visit new_admin_action_page_path
+    fill_in_basic_info(title: "Very Important Action",
+                       summary: "A summary",
+                       description: "A description")
+    next_section
+
+    select_action_type("tweet")
+    fill_in "Message", with: "A message"
+    next_section
+
+    expect(page).to have_selector("#images", visible: true, wait: 5)
+    click_on "featured-image.png"
+    next_section
+
+    expect(page).to have_selector("#sharing", visible: true, wait: 5)
+    fill_in "Share Message", with: "Twitter message"
+    fill_in "Title", with: "A social media title"
+    click_on "og-image.png"
+    next_section
+
+    tempermental do
+      click_button "Save"
+      expect(page).to have_content("Very Important Action", wait: 10)
+    end
+
+    # save_and_open_page
+    # expect(page).to have_xpath("//img[contains(@src,'missing')]")
+    expect(page).to have_xpath("//img[contains(@src,'featured-image.png')]")
+    expect(page).to have_xpath("//meta[contains(@content,'og-image.png')]", visible: false)
   end
 
   def fill_in_basic_info(title:, summary:, description:)
     fill_in "Title", with: title
     fill_in_editor "#action_page_summary", with: summary
     fill_in_editor "#action_page_description", with: description
-    fill_in_select2 "#action_page_category_id", with: category.title
+    select(category.title, from: "action_page_category_id") #we should use the label to find the select but the label here is not correctly pointing to the select
   end
 
-  def skip_image_selection
-    click_on "Next"
-    sleep 0.1
+  def next_section
     click_on "Next"
-    sleep 0.1
+    sleep 0.05
+  end
+
+  def skip_banner_selection
+    expect(page).to have_selector("#images", visible: true, wait: 5)
+    next_section
   end
 
   def fill_in_social_media
+    expect(page).to have_selector("#sharing", visible: true, wait: 5)
     fill_in "Share Message", with: "Twitter message"
     fill_in "Title", with: "A social media title"
-    click_on "Next"
+    next_section
   end
 
   def select_action_type(type)
diff --git a/spec/features/admin/previews_spec.rb b/spec/features/admin/previews_spec.rb
index 11b69850a..522427e06 100644
--- a/spec/features/admin/previews_spec.rb
+++ b/spec/features/admin/previews_spec.rb
@@ -1,12 +1,12 @@
 require "rails_helper"
 
 RSpec.describe "Admin action page previews", type: :feature, js: true do
-  before { sign_in_user(FactoryGirl.create(:admin_user)) }
+  before { sign_in_user(FactoryBot.create(:admin_user)) }
 
   xit "works for tweet actions" do
     # window switching is broken, fixing previews for now
-    tweet = FactoryGirl.create(:tweet)
-    action = FactoryGirl.create(:action_page_with_tweet, tweet: tweet)
+    tweet = FactoryBot.create(:tweet)
+    action = FactoryBot.create(:action_page_with_tweet, tweet: tweet)
     visit edit_admin_action_page_path(action)
     fill_in "Title", with: "New title"
     click_on "Action"
diff --git a/spec/features/ahoy_spec.rb b/spec/features/ahoy_spec.rb
new file mode 100644
index 000000000..3c1a78e19
--- /dev/null
+++ b/spec/features/ahoy_spec.rb
@@ -0,0 +1,43 @@
+require "rails_helper"
+
+# TODO:
+# These intermittently fail! I am not sure why but don't want to increase the
+# wait time in #take_email_action past 5
+#
+# For the logged in user spec, can also / maybe should test the display on the user
+# page instead?
+RSpec.feature "Ahoy", type: :feature, js: true do
+  let!(:action_page) { FactoryBot.create(:email_campaign).action_page }
+  let!(:user) { FactoryBot.create(:user) }
+
+  context "no user logged in" do
+    it "records an event when an action is taken" do
+      expect { take_email_action(action_page) }.to \
+        change { action_page.reload.action_count }.from(0).to(1)
+    end
+  end
+
+  context "user logged in" do
+    before { sign_in_user(user) }
+    context "has enabled action tracking" do
+      before { user.update(record_activity: true) }
+      it "creates an event with the user after taking an action" do
+        expect { take_email_action(action_page) }.to \
+          change { user.reload.taken_action?(action_page) }.from(false).to(true)
+      end
+    end
+    context "has NOT enabled action tracking" do
+      it "records an event without a user ID" do
+        expect { take_email_action(action_page) }.to \
+          change { action_page.reload.action_count }.from(0).to(1)
+        expect(user.actions).to be_empty
+      end
+    end
+  end
+  
+  def take_email_action(action_page)
+    visit action_page_path(action_page)
+    click_on "Use default mail client"
+    expect(page).to have_content("Thank You!", wait: 5)
+  end
+end
diff --git a/spec/features/congress_message.rb b/spec/features/congress_message.rb
index c412e4846..b7ccd9bd4 100644
--- a/spec/features/congress_message.rb
+++ b/spec/features/congress_message.rb
@@ -1,14 +1,14 @@
 require "rails_helper"
 
-RSpec.feature "Submit congress message", type: :feature do
-  let(:action_page) { FactoryGirl.create(:action_page_with_congress_message, :with_partner) }
+RSpec.describe "Submit congress message", type: :system do
+  let(:action_page) { FactoryBot.create(:action_page_with_congress_message, :with_partner) }
 
   let(:partner) { action_page.partners.first }
 
-  let!(:members) {
-    [FactoryGirl.create(:congress_member, state: "CA", bioguide_id: "C000880"),
-     FactoryGirl.create(:congress_member, state: "CA", bioguide_id: "A000360")]
-  }
+  let!(:members) do
+    [FactoryBot.create(:congress_member, state: "CA", bioguide_id: "C000880"),
+     FactoryBot.create(:congress_member, state: "CA", bioguide_id: "A000360")]
+  end
 
   let(:location) do
     OpenStruct.new(success: true,
@@ -25,16 +25,16 @@
 
     allow(SmartyStreets).to receive(:get_location).and_return(location)
 
-    stub_request(:post, /retrieve-form-elements/).
-      with(body: { "bio_ids" => ["C000880", "A000360"] }).
-      and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
+    stub_request(:post, /retrieve-form-elements/)
+      .with(body: { "bio_ids" => %w[C000880 A000360] })
+      .and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
 
-    stub_request(:post, /fill-out-form/).
-      and_return(status: 200, body: "{}")
+    stub_request(:post, /fill-out-form/)
+      .and_return(status: 200, body: "{}")
   end
 
   scenario "User submits a congress message and subscribes to newletters" do
-    visit "/action/#{action_page.title.downcase.gsub(" ", "-")}?partner=#{partner.code}"
+    visit "/action/#{action_page.title.downcase.tr(' ', '-')}?partner=#{partner.code}"
     fill_in "street_address", with: "The Library"
     fill_in "zipcode", with: "94109"
     click_button "Submit your message"
@@ -51,20 +51,20 @@
 
     expect(page).to have_content "Now help spread the word"
     expect(partner.subscriptions.count).to eq 1
-    expect(WebMock).to have_requested(:post, CiviCRM::supporters_api_url).
-      with(body: hash_including({
-        data: '{"contact_params":{"email":"mrgiles@sunnydale.edu","first_name":"Rupert","last_name":"Giles","source":"action center congress message :: Sample Action Page","subscribe":true,"opt_in":true},"address_params":{"city":"Sunnydale","state":null,"street":"The Library","zip":"94109","country":null},"phone":null}'
-      }))
+    expect(WebMock).to have_requested(:post, Civicrm.supporters_api_url)
+      .with(body: hash_including({
+                                   data: '{"contact_params":{"email":"mrgiles@sunnydale.edu","first_name":"Rupert","last_name":"Giles","source":"action center congress message :: Sample Action Page","subscribe":true,"opt_in":true},"address_params":{"city":"Sunnydale","state":null,"street":"The Library","zip":"94109","country":null},"phone":null}'
+                                 }))
   end
 
   scenario "Logged in user submits a congress message" do
-    giles = FactoryGirl.create(:user,
-                               first_name: "Rupert",
-                               last_name: "Giles",
-                               email: "mrgiles@sunnydale.edu")
+    giles = FactoryBot.create(:user,
+                              first_name: "Rupert",
+                              last_name: "Giles",
+                              email: "mrgiles@sunnydale.edu")
     sign_in_user(giles)
 
-    visit "/action/#{action_page.title.downcase.gsub(" ", "-")}"
+    visit "/action/#{action_page.title.downcase.tr(' ', '-')}"
     click_button "Submit your message"
 
     fill_in "common_attributes__NAME_FIRST", with: "Ripper"
diff --git a/spec/features/users_spec.rb b/spec/features/users_spec.rb
deleted file mode 100644
index 106598e70..000000000
--- a/spec/features/users_spec.rb
+++ /dev/null
@@ -1,40 +0,0 @@
-require "rails_helper"
-
-RSpec.describe "Tests about users", type: :feature do
-  before(:each) do
-    stub_civicrm
-    @user = FactoryGirl.create(:user)
-  end
-
-  it "promoted users lose their old password and need a strong one" do
-    sign_in_user(@user)
-
-    # Test that we can see that we're at the /account page fine
-    expect(page).to have_content("Personal information")
-
-    # log user out
-    find("input[value='Logout']", match: :first).click
-
-    #promote user to activist
-    @user.admin = true
-    @user.save
-
-    # try to login and see prompt to add password
-    sign_in_user(@user)
-    expect(page).not_to have_content("Personal information")
-
-    # try navigating anywhere else to make sure they can't get around it
-    visit "/admin/action_pages"
-    expect(page).to have_content("Your account has been flagged for importance")
-
-    # Submit a strong password and move on like an adult
-    fill_in "Current Password", with: @user.password
-    fill_in "New Password", with: "P1" + @user.password
-    fill_in "Confirm New Password", with: "P1" + @user.password
-    click_button "Submit"
-
-    # check that the password update nag screen is eliminated
-    visit "/account"
-    expect(page).to have_content("Personal information")
-  end
-end
diff --git a/spec/lib/action_cloner_spec.rb b/spec/lib/action_cloner_spec.rb
index 4882833e9..f7942e91b 100644
--- a/spec/lib/action_cloner_spec.rb
+++ b/spec/lib/action_cloner_spec.rb
@@ -2,51 +2,51 @@
 
 describe ActionCloner do
   it "does not persist action pages" do
-    page = FactoryGirl.create(:action_page)
+    page = FactoryBot.create(:action_page)
     clone = described_class.run(page)
     expect(clone).not_to be_persisted
   end
 
   it "returns an ActionPage with cloned attributes" do
-    page = FactoryGirl.create(:action_page)
+    page = FactoryBot.create(:action_page)
     clone_attrs = filter_attrs(described_class.run(page).attributes)
     expect(clone_attrs).to eq(filter_attrs(page.attributes))
   end
 
   it "returns a draft action page" do
-    page = FactoryGirl.build(:action_page)
+    page = FactoryBot.build(:action_page)
     clone = described_class.run(page)
     expect(clone).not_to be_published
   end
 
   it "does not return an archived page" do
-    page = FactoryGirl.build(:action_page, archived: true)
+    page = FactoryBot.build(:action_page, archived: true)
     clone = described_class.run(page)
     expect(clone).not_to be_archived
   end
 
   it "does not return a victory page" do
-    page = FactoryGirl.build(:action_page, victory: true)
+    page = FactoryBot.build(:action_page, victory: true)
     clone = described_class.run(page)
     expect(clone).not_to be_victory
   end
 
   it "retains its category" do
-    page = FactoryGirl.create(:action_page, category: FactoryGirl.build(:category))
+    page = FactoryBot.create(:action_page, category: FactoryBot.build(:category))
     clone = described_class.run(page)
     expect(clone.category.title).to eq(page.category.title)
   end
 
   it "can be persisted" do
-    page = FactoryGirl.create(:action_page)
+    page = FactoryBot.create(:action_page)
     clone = described_class.run(page)
     expect(clone.save).to be(true)
   end
 
   shared_examples "properly duplicates campaign" do |enable_mthd, model|
     let(:page) do
-      FactoryGirl.create(:action_page, enable_mthd => true,
-                         model => FactoryGirl.create(model))
+      FactoryBot.create(:action_page, enable_mthd => true,
+                                      model => FactoryBot.create(model))
     end
     let(:clone) { described_class.run(page) }
     it "does not persist" do
@@ -66,10 +66,10 @@
   it_behaves_like "properly duplicates campaign", :enable_petition, :petition
   it_behaves_like "properly duplicates campaign", :enable_call, :call_campaign
   it_behaves_like "properly duplicates campaign", :enable_congress_message,
-    :congress_message_campaign
+                  :congress_message_campaign
 
   def filter_attrs(attrs)
-    attrs_not_cloned = %w(published archived created_at updated_at slug id)
+    attrs_not_cloned = %w[published archived created_at updated_at slug id]
     attrs.tap do |hash|
       attrs_not_cloned.each { |a| hash.delete a }
     end
diff --git a/spec/lib/call_tool_spec.rb b/spec/lib/call_tool_spec.rb
index 28a128c48..6f8f81040 100644
--- a/spec/lib/call_tool_spec.rb
+++ b/spec/lib/call_tool_spec.rb
@@ -7,9 +7,9 @@
   end
 
   describe ".campaign_call" do
-    let(:campaign) { FactoryGirl.create(:call_campaign) }
+    let(:campaign) { FactoryBot.create(:call_campaign) }
 
-    let(:keywords) {
+    let(:keywords) do
       {
         phone: "000-000-0000",
         location: "00000",
@@ -17,11 +17,11 @@
         action_id: 789,
         callback_url: "/"
       }
-    }
+    end
 
     it "should get call_tool_url/call/create, transforming keyword arguments into params" do
       expect(RestClient).to receive(:get) do |url, opts|
-        base_href = Rails.application.config.call_tool_url.sub(/\/$/, "")
+        base_href = Rails.application.config.call_tool_url.sub(%r{/$}, "")
         expect(url).to eq("#{base_href}/call/create")
         expect(opts[:params]).not_to be_nil
         expect(opts[:params][:campaignId]).to eq(campaign.to_param)
@@ -40,29 +40,29 @@
     it "should raise ArgumentError if a required param is missing" do
       allow(RestClient).to receive(:get)
 
-      expect {
+      expect do
         CallTool.campaign_call(nil, **keywords)
-      }.to raise_error(ArgumentError)
+      end.to raise_error(ArgumentError)
 
-      expect {
+      expect do
         CallTool.campaign_call(campaign, **keywords.dup.tap { |x| x[:phone] = nil })
-      }.to raise_error(ArgumentError)
+      end.to raise_error(ArgumentError)
 
-      expect {
+      expect do
         CallTool.campaign_call(campaign, **keywords.dup.tap { |x| x[:location] = nil })
-      }.to raise_error(ArgumentError)
+      end.to raise_error(ArgumentError)
 
-      expect {
+      expect do
         CallTool.campaign_call(campaign, **keywords.dup.tap { |x| x[:action_id] = nil })
-      }.to raise_error(ArgumentError)
+      end.to raise_error(ArgumentError)
 
-      expect {
+      expect do
         CallTool.campaign_call(campaign, **keywords.dup.tap { |x| x[:callback_url] = nil })
-      }.to raise_error(ArgumentError)
+      end.to raise_error(ArgumentError)
 
-      expect {
+      expect do
         CallTool.campaign_call(campaign, **keywords.dup.tap { |x| x[:user_id] = nil })
-      }.not_to raise_error
+      end.not_to raise_error
     end
 
     it "should not raise any errors for twilio 'number invalid' error" do
@@ -79,7 +79,7 @@
     it "should get call_tool_url/api/campaign/:id with the call tool api key" do
       campaign = 12345
       expect(RestClient).to receive(:get) do |url, opts|
-        base_href = Rails.application.config.call_tool_url.sub(/\/$/, "")
+        base_href = Rails.application.config.call_tool_url.sub(%r{/$}, "")
         expect(url).to eq("#{base_href}/api/campaign/#{campaign}")
         expect(opts[:params][:api_key]).to eq(Rails.application.secrets.call_tool_api_key)
         OpenStruct.new(body: { required_fields: { userLocation: "postal", userPhone: "US" } }.to_json)
@@ -90,13 +90,13 @@
   end
 
   describe ".campaigns" do
-    let(:calltool_campaign) {
+    let(:calltool_campaign) do
       { "id" => 1, "name" => "call someone", "status" => "live" }
-    }
+    end
 
     before do
-      stub_request(:get, %r{/api/campaign\?api_key(.*)?&page=1}).
-        to_return(status: 200, body: { "objects" => [calltool_campaign], "page" => 1, "total_pages" => 1 }.to_json)
+      stub_request(:get, %r{/api/campaign\?api_key(.*)?&page=1})
+        .to_return(status: 200, body: { "objects" => [calltool_campaign], "page" => 1, "total_pages" => 1 }.to_json)
     end
 
     it "should get call_tool_url/api/campaign and return values with id, name, status" do
diff --git a/spec/lib/civic_api_spec.rb b/spec/lib/civic_api_spec.rb
new file mode 100644
index 000000000..a2920e45c
--- /dev/null
+++ b/spec/lib/civic_api_spec.rb
@@ -0,0 +1,51 @@
+require "rails_helper"
+
+describe CivicApi do
+  before do
+    Rails.application.config.google_civic_api_url = "http://civic.example.com"
+    Rails.application.secrets.google_civic_api_key = "test-key-for-civic-api"
+  end
+
+  describe ".state_rep_search" do
+    let(:email_campaign) { FactoryBot.create(:email_campaign, :state_leg) }
+    let(:address) { "815 Eddy St 94109" }
+
+    it "should get civic_api_url with the correct params" do
+      expect(RestClient).to receive(:get) do |url, opts|
+        expect(url).to eq("http://civic.example.com")
+        expect(opts[:params]).not_to be_nil
+        expect(opts[:params][:address]).to eq("815 Eddy St 94109")
+        expect(opts[:params][:includeOffices]).to eq(true)
+        expect(opts[:params][:levels]).to eq("administrativeArea1")
+        expect(opts[:params][:roles]).to eq("legislatorUpperBody")
+        expect(opts[:params][:key]).to eq("test-key-for-civic-api")
+      end
+
+      CivicApi.state_rep_search(address, email_campaign.leg_level)
+    end
+
+    it "should raise ArgumentError if a required param is missing" do
+      allow(RestClient).to receive(:get)
+
+      expect do
+        CivicApi.state_rep_search(nil)
+      end.to raise_error(ArgumentError)
+
+      expect do
+        CivicApi.state_rep_search(nil, email_campaign.leg_level)
+      end.to raise_error(ArgumentError)
+
+      expect do
+        CivicApi.state_rep_search(address)
+      end.to raise_error(ArgumentError)
+
+      expect do
+        CivicApi.state_rep_search(address, email_campaign.leg_level)
+      end.not_to raise_error
+    end
+  end
+
+  describe ".all_state_reps_for_role" do
+    # Feature not active -- admin front-end planned but not yet implemented
+  end
+end
diff --git a/spec/lib/civicrm_spec.rb b/spec/lib/civicrm_spec.rb
index d4929ed2e..b03be08f2 100644
--- a/spec/lib/civicrm_spec.rb
+++ b/spec/lib/civicrm_spec.rb
@@ -1,25 +1,14 @@
 require "rails_helper"
 
-describe CiviCRM do
+describe Civicrm do
   before do
     stub_civicrm
   end
 
   describe "self.get_checksum" do
     it "calls the civicrm API with method 'generate_checksum'" do
-      CiviCRM::get_checksum(123)
-      assert_requested :post, CiviCRM::supporters_api_url, body: /generate_checksum/
-    end
-  end
-end
-
-shared_examples_for "civicrm_user_methods" do
-  subject { described_class.new }
-
-  describe ".manage_subscription_url!" do
-    it "encodes a checksum" do
-      allow(CiviCRM).to receive(:get_checksum).and_return("xyz")
-      expect(subject.manage_subscription_url!).to include("cs=xyz")
+      Civicrm.get_checksum(123)
+      assert_requested :post, Civicrm.supporters_api_url, body: /generate_checksum/
     end
   end
 end
diff --git a/spec/lib/congress_forms_spec.rb b/spec/lib/congress_forms_spec.rb
index 7c01ec8a7..b394a3463 100644
--- a/spec/lib/congress_forms_spec.rb
+++ b/spec/lib/congress_forms_spec.rb
@@ -2,33 +2,35 @@
 
 describe CongressForms do
   describe CongressForms::Form do
-    let(:form) {
+    let(:form) do
       CongressForms::Form.new("C000880", [
-        { "value" => "$NAME_FIRST" },
-        { "value" => "$NAME_LAST" },
-        { "value" => "$ADDRESS_STATE", "options_hash" => {
-            "CALIFORNIA" => "CA",
-            "NEW YORK" => "NY"
-        } }
-      ])
-    }
+                                { "value" => "$NAME_FIRST" },
+                                { "value" => "$NAME_LAST" },
+                                { "value" => "$ADDRESS_STATE", "options_hash" => {
+                                  "CALIFORNIA" => "CA",
+                                  "NEW YORK" => "NY"
+                                } }
+                              ])
+    end
 
-    let(:input) { {
-      "$NAME_FIRST" => "Willow",
-      "$NAME_LAST" => "Rosenberg",
-      "$MESSAGE" => "Impeach Mayor Richard Wilkins III",
-      "$ADDRESS_STATE" => "CA"
-    } }
+    let(:input) do
+      {
+        "$NAME_FIRST" => "Willow",
+        "$NAME_LAST" => "Rosenberg",
+        "$MESSAGE" => "Impeach Mayor Richard Wilkins III",
+        "$ADDRESS_STATE" => "CA"
+      }
+    end
 
     describe "::find" do
       before do
-        stub_request(:post, /retrieve-form-elements/).
-          with(body: { "bio_ids" => ["C000880", "A000360"] }).
-          and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
+        stub_request(:post, /retrieve-form-elements/)
+          .with(body: { "bio_ids" => %w[C000880 A000360] })
+          .and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
       end
 
       it "retrieves a Form for each bioguide_id" do
-        forms = CongressForms::Form.find(["C000880", "A000360"]).first
+        forms = CongressForms::Form.find(%w[C000880 A000360]).first
         expect(forms.length).to eq 2
         lamar = forms.first
         expect(lamar.fields.length).to eq 11
@@ -38,13 +40,13 @@
 
     describe "#fill" do
       it "posts to the congress forms API" do
-        stub_request(:post, /fill-out-form/).
-          and_return(status: 200, body: "{}")
-        campaign = FactoryGirl.build(:congress_message_campaign)
+        stub_request(:post, /fill-out-form/)
+          .and_return(status: 200, body: "{}")
+        campaign = FactoryBot.build(:congress_message_campaign)
         form.fill(input, campaign.campaign_tag)
-        expect(WebMock).to have_requested(:post, /fill-out-form/).
-          with(body: { bio_id: "C000880", fields: input,
-                       campaign_tag: campaign.campaign_tag })
+        expect(WebMock).to have_requested(:post, /fill-out-form/)
+          .with(body: { bio_id: "C000880", fields: input,
+                        campaign_tag: campaign.campaign_tag })
       end
     end
   end
diff --git a/spec/lib/paperclip_spec.rb b/spec/lib/paperclip_spec.rb
deleted file mode 100644
index 9f6d38c80..000000000
--- a/spec/lib/paperclip_spec.rb
+++ /dev/null
@@ -1,29 +0,0 @@
-require "rails_helper"
-
-RSpec.describe Paperclip::MediaTypeSpoofDetector do
-  let(:img_file) { "test-image.png" }
-  let(:csv) { "schools.csv" }
-  it "passes for good png files" do
-    detector = described_class.new(File.open(file_fixture(img_file)), img_file,
-                                   "image/png")
-    expect(detector.spoofed?).to eq(false)
-  end
-
-  it "passes for png files when the header is 'binary/octet-stream'" do
-    detector = described_class.new(File.open(file_fixture(img_file)), img_file,
-                                   "binary/octet-stream")
-    expect(detector.spoofed?).to eq(false)
-  end
-
-  it "fails when headers are 'binary/octet-stream' and not an image" do
-    detector = described_class.new(File.open(file_fixture(csv)), csv,
-                                   "binary/octet-stream")
-    expect(detector.spoofed?).to eq(true)
-  end
-
-  it "fails for non-images" do
-    detector = described_class.new(File.open(file_fixture(csv)), csv,
-                                   "text/csv")
-    expect(detector.spoofed?).to eq(true)
-  end
-end
diff --git a/spec/mailers/user_mailer_spec.rb b/spec/mailers/user_mailer_spec.rb
index bfdf96d2e..ca7c47cfe 100644
--- a/spec/mailers/user_mailer_spec.rb
+++ b/spec/mailers/user_mailer_spec.rb
@@ -2,8 +2,8 @@
 
 describe UserMailer, type: :mailer do
   describe "instructions" do
-    let(:user) { FactoryGirl.create(:user) }
-    let(:action_page) { FactoryGirl.create(:action_page) }
+    let(:user) { FactoryBot.create(:user) }
+    let(:action_page) { FactoryBot.create(:action_page) }
 
     it "escapes HTML in names" do
       bad_name = "<a href='junk.org'>Mallory</a>"
diff --git a/spec/models/action_institution_spec.rb b/spec/models/action_institution_spec.rb
index 12aa11448..e539d6b4a 100644
--- a/spec/models/action_institution_spec.rb
+++ b/spec/models/action_institution_spec.rb
@@ -3,11 +3,11 @@
 RSpec.describe ActionInstitution, type: :model do
   describe ".add" do
     let!(:page) do
-      petition = FactoryGirl.create(:petition, enable_affiliations: true)
-      FactoryGirl.create(:action_page_with_petition, petition: petition)
+      petition = FactoryBot.create(:petition, enable_affiliations: true)
+      FactoryBot.create(:action_page_with_petition, petition: petition)
     end
     let!(:institutions) do
-      FactoryGirl.create_list(:institution, 2, category: "university")
+      FactoryBot.create_list(:institution, 2, category: "university")
     end
     it "adds all institutions of a category" do
       described_class.add(action_page: page, category: "university")
@@ -19,13 +19,13 @@
     end
     it "adds new institutions in the category" do
       page.institutions << institutions
-      new = FactoryGirl.create(:institution, category: "university")
+      new = FactoryBot.create(:institution, category: "university")
       described_class.add(action_page: page, category: "university")
       expect(page.reload.institutions).to eq(institutions + [new])
     end
     it "removes institutions when reset: '1'" do
       page.institutions << institutions
-      new = FactoryGirl.create(:institution, category: "city")
+      new = FactoryBot.create(:institution, category: "city")
       described_class.add(action_page: page, category: "city", reset: "1")
       expect(page.reload.institutions).to eq([new])
     end
diff --git a/spec/models/action_page_spec.rb b/spec/models/action_page_spec.rb
index e292e1cad..77896610b 100644
--- a/spec/models/action_page_spec.rb
+++ b/spec/models/action_page_spec.rb
@@ -1,16 +1,16 @@
 require "rails_helper"
 
 describe ActionPage do
-  let(:attr) { FactoryGirl.attributes_for :action_page }
+  let(:attr) { FactoryBot.attributes_for :action_page }
 
   it "creates a new instance given a valid attribute" do
-    expect {
+    expect do
       ActionPage.create!(attr)
-    }.to change { ActionPage.count }.by(1)
+    end.to change { ActionPage.count }.by(1)
   end
 
   it "knows when to redirect from an archived action" do
-    action_page = FactoryGirl.build_stubbed :archived_action_page
+    action_page = FactoryBot.build_stubbed :archived_action_page
     expect(action_page.redirect_from_archived_to_active_action?).to be_truthy
   end
 
@@ -25,16 +25,15 @@
   # end
 
   describe "slug" do
-    let(:page) { FactoryGirl.create(:action_page) }
+    let(:page) { FactoryBot.create(:action_page) }
     let(:new_slug) { "a-better-slug" }
 
     it "has a friendly slug" do
-      expect(page.slug).to eq(page.title.downcase.gsub(" ", "-"))
+      expect(page.slug).to eq(page.title.downcase.tr(" ", "-"))
     end
 
     it "updates the slug when title changes" do
-      expect { page.update(title: "something else") }
-        .to change { page.slug }
+      expect { page.update(title: "something else") }.to change { page.slug }
     end
 
     it "does not update slug when unrelated attr changes" do
@@ -74,17 +73,17 @@
       before { page.update(slug: new_slug) }
 
       it "does not allow slug conflicts" do
-        expect(FactoryGirl.create(:action_page, slug: old_slug).slug)
+        expect(FactoryBot.create(:action_page, slug: old_slug).slug)
           .not_to eq(old_slug)
       end
     end
   end
 
   describe "counter cache" do
-    let(:page) { FactoryGirl.create(:action_page_with_petition) }
+    let(:page) { FactoryBot.create(:action_page_with_petition) }
     before(:each) do
-      FactoryGirl.create_list(:ahoy_view, 2, action_page: page)
-      FactoryGirl.create(:ahoy_signature, action_page: page)
+      FactoryBot.create_list(:ahoy_view, 2, action_page: page)
+      FactoryBot.create(:ahoy_signature, action_page: page)
       page.reload
     end
     it "counts actions taken" do
@@ -97,24 +96,24 @@
 
   describe "#actions_taken_percent" do
     it "calculates the percentage of views that led to actions" do
-      page = FactoryGirl.create(:action_page_with_petition)
-      FactoryGirl.create_list(:ahoy_view, 3, action_page: page)
-      FactoryGirl.create_list(:ahoy_signature, 2, action_page: page)
+      page = FactoryBot.create(:action_page_with_petition)
+      FactoryBot.create_list(:ahoy_view, 3, action_page: page)
+      FactoryBot.create_list(:ahoy_signature, 2, action_page: page)
       page.reload
       expect(page.actions_taken_percent).to eq((2 / 3.0) * 100)
     end
     it "returns all zeroes when no events" do
-      page = FactoryGirl.create(:action_page)
+      page = FactoryBot.create(:action_page)
       expect(page.actions_taken_percent).to eq(0)
     end
   end
 
   describe ".type(types)" do
-    let(:call) { FactoryGirl.create(:action_page_with_call) }
-    let(:congress_message) { FactoryGirl.create(:action_page_with_congress_message) }
-    let(:email) { FactoryGirl.create(:action_page_with_email) }
-    let(:petition) { FactoryGirl.create(:action_page_with_petition) }
-    let(:tweet) { FactoryGirl.create(:action_page_with_tweet) }
+    let(:call) { FactoryBot.create(:action_page_with_call) }
+    let(:congress_message) { FactoryBot.create(:action_page_with_congress_message) }
+    let(:email) { FactoryBot.create(:action_page_with_email) }
+    let(:petition) { FactoryBot.create(:action_page_with_petition) }
+    let(:tweet) { FactoryBot.create(:action_page_with_tweet) }
 
     before do
       [call, congress_message, email, petition, tweet]
@@ -124,7 +123,7 @@
       calls = ActionPage.type("call")
       expect(calls).to contain_exactly(call)
 
-      calls_and_tweets = ActionPage.type(["call", "tweet"])
+      calls_and_tweets = ActionPage.type(%w[call tweet])
       expect(calls_and_tweets).to contain_exactly(call, tweet)
 
       all = ActionPage.type("call", "congress_message", "email", "petition", "tweet")
@@ -139,33 +138,58 @@
   describe ".status(status)" do
     shared_examples "returns only the given status" do |status, action|
       it status do
-        action = FactoryGirl.create(*action)
+        action = FactoryBot.create(*action)
         result = ActionPage.status(status)
         expect(result).to contain_exactly(action)
       end
     end
 
     context "not live" do
-      before { FactoryGirl.create(:action_page) }
+      before { FactoryBot.create(:action_page) }
 
       it_behaves_like "returns only the given status", "archived",
-        [:action_page, { archived: true }]
+                      [:action_page, { archived: true }]
 
       it_behaves_like "returns only the given status", "victory",
-        [:action_page, { victory: true }]
+                      [:action_page, { victory: true }]
 
       it_behaves_like "returns only the given status", "draft",
-        [:action_page, { published: false }]
+                      [:action_page, { published: false }]
     end
 
     context "live action" do
-      before { FactoryGirl.create(:action_page, published: false) }
+      before { FactoryBot.create(:action_page, published: false) }
       it_behaves_like "returns only the given status", "live",
-        [:action_page, { published: true }]
+                      [:action_page, { published: true }]
     end
 
     it "raises an ArgumentError when an invalid status is given" do
       expect { ActionPage.status("unknown") }.to raise_error(ArgumentError)
     end
   end
+
+  describe "image attachment" do
+    context "when there is no image" do
+      it "uses missing" do
+        page = ActionPage.create!(attr)
+        expect(page.featured_image.url).to match "missing.png"
+      end
+    end
+
+    context "when there is a featured image" do
+      let(:page_attr) { FactoryBot.attributes_for :action_page, remote_featured_image_url: "https://example.com/fakeimages/test.png" }
+      let(:test_image_file_upload) { fixture_file_upload("test-image.png", "image/png").tempfile.to_io }
+      it "creates a new record with image fields" do
+        stub_request(:get, %r{fakeimages/test.png}).to_return(status: 200, body: test_image_file_upload, headers: { content_type: "image/png" })
+        stub_request(:put, %r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png}).to_return(status: 200, body: "", headers: {})
+
+        page = ActionPage.create!(page_attr)
+        expect(page.featured_image_file_name).to eq("test.png")
+        expect(page.featured_image.content_type).to eq("image/png")
+        expect(WebMock).to have_requested(:put, %r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png})
+        expect(page.featured_image.url).to match(%r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png})
+        expect(page.image.url).to match(%r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png})
+      end
+    end
+  end
 end
diff --git a/spec/models/ahoy/event_spec.rb b/spec/models/ahoy/event_spec.rb
index 749615d91..60203874e 100644
--- a/spec/models/ahoy/event_spec.rb
+++ b/spec/models/ahoy/event_spec.rb
@@ -3,24 +3,24 @@
 describe Ahoy::Event do
   describe "#types" do
     it "returns event types for an action" do
-      action_page = FactoryGirl.create(:action_page_with_tweet)
-      expect(Ahoy::Event.action_types(action_page)).to eq([:views, :tweets])
+      action_page = FactoryBot.create(:action_page_with_tweet)
+      expect(Ahoy::Event.action_types(action_page)).to eq(%i[views tweets])
     end
   end
 
   describe "calculations" do
     let!(:now) { Time.zone.parse("12-11-2019 11:00 AM") }
     let!(:page) do
-      FactoryGirl.create(:action_page_with_petition,
-                         created_at: now - 1.week, updated_at: now)
+      FactoryBot.create(:action_page_with_petition,
+                        created_at: now - 1.week, updated_at: now)
     end
     before(:each) do
-      FactoryGirl.create_list(:ahoy_view, 3,
-                              action_page: page, time: now - 3.days)
-      FactoryGirl.create_list(:ahoy_view, 2,
-                              action_page: page, time: now + 1.hour)
-      FactoryGirl.create(:ahoy_signature, action_page: page, time: now + 2.hours)
-      FactoryGirl.create(:ahoy_signature, action_page: page, time: now - 2.days)
+      FactoryBot.create_list(:ahoy_view, 3,
+                             action_page: page, time: now - 3.days)
+      FactoryBot.create_list(:ahoy_view, 2,
+                             action_page: page, time: now + 1.hour)
+      FactoryBot.create(:ahoy_signature, action_page: page, time: now + 2.hours)
+      FactoryBot.create(:ahoy_signature, action_page: page, time: now - 2.days)
       page.reload
     end
 
diff --git a/spec/models/congress_member_spec.rb b/spec/models/congress_member_spec.rb
index 0018d4cfb..765804953 100644
--- a/spec/models/congress_member_spec.rb
+++ b/spec/models/congress_member_spec.rb
@@ -2,7 +2,7 @@
 
 describe CongressMember do
   let(:legislators) do
-    end_date = (Time.now + 1.year).strftime("%Y-%m-%d")
+    end_date = (Time.zone.now + 1.year).strftime("%Y-%m-%d")
     [
       CongressMember.new(
         "bioguide_id" => "A000001",
diff --git a/spec/models/congress_message_campaign_spec.rb b/spec/models/congress_message_campaign_spec.rb
index 601b3d551..e405b2031 100644
--- a/spec/models/congress_message_campaign_spec.rb
+++ b/spec/models/congress_message_campaign_spec.rb
@@ -1,11 +1,12 @@
-
 require "rails_helper"
 
 describe EmailCampaign do
-  let(:campaign) { FactoryGirl.create :congress_message_campaign }
+  let(:campaign) { FactoryBot.create :congress_message_campaign }
 
   it "generates a url for fills by date" do
-    expect(campaign.date_fills_url(Date.today - 30.days, Date.today)).to include "campaign_tag=a+campaign+tag"
-    expect(campaign.date_fills_url(Date.today - 30.days, Date.today)).to match /date_end=\d{4}-\d{2}-\d{2}&date_start=\d{4}-\d{2}-\d{2}/
+    expect(campaign.date_fills_url(Time.zone.today - 30.days, Time.zone.today)).to \
+      include("campaign_tag=a+campaign+tag")
+    expect(campaign.date_fills_url(Time.zone.today - 30.days, Time.zone.today)).to \
+      match(/date_end=\d{4}-\d{2}-\d{2}&date_start=\d{4}-\d{2}-\d{2}/)
   end
 end
diff --git a/spec/models/congress_message_spec.rb b/spec/models/congress_message_spec.rb
index b3cd1cba6..b6b0a57ba 100644
--- a/spec/models/congress_message_spec.rb
+++ b/spec/models/congress_message_spec.rb
@@ -1,9 +1,9 @@
 require "rails_helper"
 
 describe CongressMessage do
-  subject {
-    FactoryGirl.build(:congress_message)
-  }
+  subject do
+    FactoryBot.build(:congress_message)
+  end
 
   describe "#common_fields" do
     it "groups matching opt_hashes" do
diff --git a/spec/models/email_campaign_spec.rb b/spec/models/email_campaign_spec.rb
index 6a470716d..846bb2b0c 100644
--- a/spec/models/email_campaign_spec.rb
+++ b/spec/models/email_campaign_spec.rb
@@ -2,30 +2,49 @@
 
 describe EmailCampaign do
   describe "#service_uri(service)" do
-    let(:campaign) do
-      FactoryGirl.create(
-        :email_campaign,
-        email_addresses: "a@example.com, b@example.com",
-        subject: "hey hey hey",
-        message: "hello world"
-      )
+    let(:custom_campaign) do
+      FactoryBot.create(:email_campaign)
     end
 
     context "service = :default" do
       it "should redirect to a mailto uri" do
-        expect(campaign.service_uri(:default)).to eq("mailto:a@example.com,b@example.com?body=hello%20world&subject=hey%20hey%20hey")
+        expect(custom_campaign.service_uri(:default)).to eq("mailto:a@example.com,b@example.com?body=hello%20world&subject=hey%20hey%20hey")
       end
     end
 
     context "service = :gmail" do
       it "should redirect to gmail's mail url" do
-        expect(campaign.service_uri(:gmail)).to eq("https://mail.google.com/mail/?view=cm&fs=1&body=hello+world&su=hey+hey+hey&to=a%40example.com%2C+b%40example.com")
+        expect(custom_campaign.service_uri(:gmail)).to eq("https://mail.google.com/mail/?view=cm&fs=1&body=hello+world&su=hey+hey+hey&to=a%40example.com%2C+b%40example.com")
       end
     end
 
     context "service = :hotmail" do
       it "should redirect to outlook's mail url" do
-        expect(campaign.service_uri(:hotmail)).to eq("https://outlook.live.com/default.aspx?rru=compose&body=hello+world&subject=hey+hey+hey&to=a%40example.com%2C+b%40example.com#page=Compose")
+        expect(custom_campaign.service_uri(:hotmail)).to eq("https://outlook.live.com/default.aspx?rru=compose&body=hello+world&subject=hey+hey+hey&to=a%40example.com%2C+b%40example.com#page=Compose")
+      end
+    end
+  end
+
+  describe "#service_uri(service, opts = {})" do
+    let(:state_leg_campaign) do
+      FactoryBot.create(:email_campaign, :state_leg)
+    end
+
+    context "service = :default, opts = {email: 'state_rep@example.com'}" do
+      it "should redirect to a mailto uri" do
+        expect(state_leg_campaign.service_uri(:default, { email: "state_rep@example.com" })).to eq("mailto:state_rep@example.com?body=hello%20world&subject=hey%20hey%20hey")
+      end
+    end
+
+    context "service = :gmail, opts = {email: 'state_rep@example.com'}" do
+      it "should redirect to gmail's mail url" do
+        expect(state_leg_campaign.service_uri(:gmail, { email: "state_rep@example.com" })).to eq("https://mail.google.com/mail/?view=cm&fs=1&body=hello+world&su=hey+hey+hey&to=state_rep%40example.com")
+      end
+    end
+
+    context "service = :hotmail, opts = {email: 'state_rep@example.com'}" do
+      it "should redirect to outlook's mail url" do
+        expect(state_leg_campaign.service_uri(:hotmail, { email: "state_rep@example.com" })).to eq("https://outlook.live.com/default.aspx?rru=compose&body=hello+world&subject=hey+hey+hey&to=state_rep%40example.com#page=Compose")
       end
     end
   end
diff --git a/spec/models/institution_spec.rb b/spec/models/institution_spec.rb
index 208318ca9..901304328 100644
--- a/spec/models/institution_spec.rb
+++ b/spec/models/institution_spec.rb
@@ -1,53 +1,18 @@
 require "rails_helper"
 
 describe Institution do
-  describe ".top" do
-    let(:petition) { FactoryGirl.create(:local_organizing_petition) }
-
-    let(:high_rank) { petition.action_page.institutions.create(name: "A", category: "University") }
-    let(:mid_rank) { petition.action_page.institutions.create(name: "B", category: "University") }
-    let(:low_rank) { petition.action_page.institutions.create(name: "C", category: "University") }
-
-    let(:student) { petition.action_page.affiliation_types.find_or_create_by!(name: "Student") }
-
-    before(:each) do
-      100.times do
-        sig = FactoryGirl.create(:signature, petition_id: petition.id)
-        sig.affiliations.create(institution_id: high_rank.id, affiliation_type: student)
-      end
-
-      50.times do
-        sig = FactoryGirl.create(:signature, petition_id: petition.id)
-        sig.affiliations.create(institution_id: mid_rank.id, affiliation_type: student)
-      end
-
-      10.times do
-        sig = FactoryGirl.create(:signature, petition_id: petition.id)
-        sig.affiliations.create(institution_id: low_rank.id, affiliation_type: student)
-      end
-    end
-
-    it "should return the top n institutions ordered by number of signatures" do
-      expect(petition.action_page.institutions.top(3).to_a).to eq([high_rank, mid_rank, low_rank])
-    end
-
-    it "should allow an argument which reorders a certain institution to the front" do
-      expect(petition.action_page.institutions.top(3, first: low_rank.id).to_a).to eq([low_rank, high_rank, mid_rank])
-    end
-  end
-
   describe ".import" do
-    let(:action_page) { FactoryGirl.create(:action_page) }
-    let(:institution) { FactoryGirl.create(:institution) }
+    let(:action_page) { FactoryBot.create(:action_page) }
+    let(:institution) { FactoryBot.create(:institution) }
     let(:names) do
       ["University of California, Berkeley",
        "University of California, Santa Cruz"]
     end
 
     it "adds institutions by name" do
-      expect {
+      expect do
         described_class.import("University", names)
-      }.to change(Institution.where(category: "University"), :count).by(names.count)
+      end.to change(Institution.where(category: "University"), :count).by(names.count)
     end
   end
 end
diff --git a/spec/models/petition_spec.rb b/spec/models/petition_spec.rb
index 21abb0e54..496ac035a 100644
--- a/spec/models/petition_spec.rb
+++ b/spec/models/petition_spec.rb
@@ -14,11 +14,10 @@
   end
 
   it "should output useful CSV files" do
-    p = FactoryGirl.create(:petition_complete_with_one_hundred_signatures)
-    expected_first_record = "John Doe,#{p.signatures.to_a.first.email},San Francisco,CA,United States of America\n"
-
+    p = FactoryBot.create(:petition_complete_with_one_hundred_signatures)
+    expected_first_record = "John Doe,#{p.signatures.order(:id).first.email},"\
+                            "San Francisco,CA,United States of America\n"
     csv = p.signatures.to_presentable_csv
-
     columns = csv.lines.first
     first_record = csv.lines[1]
 
diff --git a/spec/models/signature_spec.rb b/spec/models/signature_spec.rb
index 60691093e..593e628d9 100644
--- a/spec/models/signature_spec.rb
+++ b/spec/models/signature_spec.rb
@@ -23,29 +23,29 @@
   it "should reject spammy emails" do
     invalid_email = @attr.merge(email: "a@b")
 
-    expect {
+    expect do
       Signature.create!(invalid_email)
-    }.to raise_error ActiveRecord::RecordInvalid
+    end.to raise_error ActiveRecord::RecordInvalid
   end
 
   it "should impose an arbitrary opinion as to whether a string of text may refer to a country" do
-    # note: it is my personal belief that there is no such thing as a country/ nation =)
+    # NOTE: it is my personal belief that there is no such thing as a country/ nation =)
     arbitrarily_invalid_opinion = @attr.merge(country_code: "laserland")
 
-    expect {
+    expect do
       Signature.create!(arbitrarily_invalid_opinion)
-    }.to raise_error ActiveRecord::RecordInvalid
+    end.to raise_error ActiveRecord::RecordInvalid
   end
 
   it "should reject long zipcodes" do
     long_zip = @attr.merge(zipcode: "9" * 13)
 
-    expect {
+    expect do
       Signature.create!(long_zip)
-    }.to raise_error ActiveRecord::RecordInvalid
+    end.to raise_error ActiveRecord::RecordInvalid
   end
 
-  describe ".filter" do
+  describe ".search" do
     let(:jon) { Signature.create!(@attr.merge(email: "xx@example.com", first_name: "Jon", last_name: "A")) }
     let(:jan) { Signature.create!(@attr.merge(email: "xy@example.com", first_name: "Jan", last_name: "B")) }
     let(:jeb) { Signature.create!(@attr.merge(email: "wz@example.com", first_name: "Jeb", last_name: "C")) }
@@ -54,23 +54,23 @@
     let(:all_signatures) { [jon, jan, jeb, jen] }
 
     it "should return .all when query is blank" do
-      expect(Signature.filter(nil)).to contain_exactly(*all_signatures)
-      expect(Signature.filter("")).to contain_exactly(*all_signatures)
-      expect(Signature.filter("    \t")).to contain_exactly(*all_signatures)
+      expect(Signature.search(nil)).to contain_exactly(*all_signatures)
+      expect(Signature.search("")).to contain_exactly(*all_signatures)
+      expect(Signature.search("    \t")).to contain_exactly(*all_signatures)
     end
 
     it "should return signatures with matching email (case insensitive)" do
-      expect(Signature.filter("example.com")).to contain_exactly(*all_signatures)
-      expect(Signature.filter("EXAMPLE")).to contain_exactly(*all_signatures)
-      expect(Signature.filter("w")).to contain_exactly(jeb, jen)
-      expect(Signature.filter("xx")).to contain_exactly(jon)
+      expect(Signature.search("example.com")).to contain_exactly(*all_signatures)
+      expect(Signature.search("EXAMPLE")).to contain_exactly(*all_signatures)
+      expect(Signature.search("w")).to contain_exactly(jeb, jen)
+      expect(Signature.search("xx")).to contain_exactly(jon)
     end
 
     it "should return signatures with matching names (case insensitive)" do
-      expect(Signature.filter("J")).to contain_exactly(*all_signatures)
-      expect(Signature.filter("Jon")).to contain_exactly(jon)
-      expect(Signature.filter("Jan B")).to contain_exactly(jan)
-      expect(Signature.filter("Jeb c")).to contain_exactly(jeb)
+      expect(Signature.search("J")).to contain_exactly(*all_signatures)
+      expect(Signature.search("Jon")).to contain_exactly(jon)
+      expect(Signature.search("Jan B")).to contain_exactly(jan)
+      expect(Signature.search("Jeb c")).to contain_exactly(jeb)
     end
   end
 end
diff --git a/spec/models/source_file_spec.rb b/spec/models/source_file_spec.rb
index 0f1e47cef..daa07269c 100644
--- a/spec/models/source_file_spec.rb
+++ b/spec/models/source_file_spec.rb
@@ -2,7 +2,7 @@
 
 describe SourceFile do
   before(:each) do
-    @source_file = FactoryGirl.create(:source_file, key: "meh.jpg")
+    @source_file = FactoryBot.create(:source_file, key: "meh.jpg")
   end
 
   it "should generate full_urls correctly when amazon_bucket_url is set" do
diff --git a/spec/models/topic_category_spec.rb b/spec/models/topic_category_spec.rb
index f863aeac4..6ec41bf2b 100644
--- a/spec/models/topic_category_spec.rb
+++ b/spec/models/topic_category_spec.rb
@@ -1,21 +1,21 @@
 require "rails_helper"
 
 describe TopicCategory do
-  subject { FactoryGirl.create(:topic_category) }
+  subject { FactoryBot.create(:topic_category) }
 
   describe "#best_match" do
     it "selects the best match from a list of options" do
-      options = ["Spike", "Vampire3", "Drusilla", "Vampire2", "Harmony"].map { |o| [o] * 2 }
-      expect(subject.best_match options).to eq "Vampire2"
+      options = %w[Spike Vampire3 Drusilla Vampire2 Harmony].map { |o| [o] * 2 }
+      expect(subject.best_match(options)).to eq "Vampire2"
     end
 
     it "ignores case, whitespace, and punctuation when matching" do
       options = ["Vampire3", "VamPire 2!"].map { |o| [o] * 2 }
-      expect(subject.best_match options).to eq "VamPire 2!"
+      expect(subject.best_match(options)).to eq "VamPire 2!"
     end
 
     after do
-      FactoryGirl.reload # Reset sequence numbers
+      FactoryBot.reload # Reset sequence numbers
     end
   end
 end
diff --git a/spec/models/user_spec.rb b/spec/models/user_spec.rb
index af5fd159a..46bc39c1f 100644
--- a/spec/models/user_spec.rb
+++ b/spec/models/user_spec.rb
@@ -1,32 +1,29 @@
 require "rails_helper"
-require "lib/civicrm_spec"
 
 describe User do
-  let(:attr) { FactoryGirl.attributes_for :user }
-  let(:user) { FactoryGirl.create(:user) }
+  let(:attr) { FactoryBot.attributes_for :user }
+  let(:user) { FactoryBot.create(:user) }
 
   before(:each) do
     stub_civicrm
   end
 
-  it_behaves_like "civicrm_user_methods"
-
   it "creates a new instance given a valid attributes" do
     User.create!(attr)
   end
 
   describe "password management" do
     it "resets password reset tokens upon email change" do
-      user.update_attributes(reset_password_token: "stub_token")
-      user.update_attributes(email: "2" + user.email)
+      user.update(reset_password_token: "stub_token")
+      user.update(email: "2#{user.email}")
       user.confirm
       expect(user.reset_password_token).to be_nil
     end
 
     it "resets password reset tokens upon password change" do
-      user.update_attributes(reset_password_token: "stub_token")
+      user.update(reset_password_token: "stub_token")
       expect(user.reset_password_token).not_to be_nil
-      user.update_attributes(password: "My new password is pretty great")
+      user.update(password: "My new password is pretty great")
       expect(user.reset_password_token).to be_nil
     end
 
@@ -36,7 +33,7 @@
     end
 
     it "makes sure admins are using strong passwords" do
-      user = FactoryGirl.create(:user, admin: true)
+      user = FactoryBot.create(:user, admin: true)
 
       result = set_weak_password(user)
       expect(result).to be_falsey
@@ -47,50 +44,39 @@
   end
 
   describe "track user actions" do
-    let(:user) { FactoryGirl.create(:user, record_activity: true) }
-    let(:ahoy) { Ahoy::Tracker.new }
-    let(:action_page) { FactoryGirl.create :action_page_with_petition }
+    let(:user) { FactoryBot.create(:user, record_activity: true) }
+    let(:action_page) { FactoryBot.create :action_page_with_petition }
 
     it "knows if the user has taken a given action" do
-      ahoy.authenticate(user)
-      track_signature(action_page)
-
+      FactoryBot.create(:ahoy_signature, action_page: action_page, user: user)
       expect(user.taken_action?(action_page)).to be_truthy
     end
+  end
 
-    it "ranks users" do
-      record_several_actions
-      expect(user.percentile_rank).to eq(50)
+  describe ".manage_subscription_url!" do
+    it "encodes a checksum" do
+      allow(Civicrm).to receive(:get_checksum).and_return("xyz")
+      expect(user.manage_subscription_url!).to include("cs=xyz")
     end
   end
 end
 
+# TODO: possibly remove, this seems unused?
 def record_several_actions
-  # a user with no actions
-  FactoryGirl.create(:user, record_activity: true)
-
-  # a user with three actions
-  ahoy.authenticate(FactoryGirl.create(:user, record_activity: true))
-  3.times { track_signature(action_page) }
-
-  # a user with 1 action
-  ahoy.authenticate(FactoryGirl.create(:user, record_activity: true))
-  1.times { track_signature(action_page) }
-
-  # our friend, with 2 actions
-  ahoy.authenticate(user)
-  2.times { track_signature(action_page) }
-  track_view(action_page)
-end
-
-def track_signature(action_page)
-  ahoy.track "Action",
-    { type: "action", actionType: "signature", actionPageId: action_page.id },
-    action_page: action_page
+  create_user_with_tracked_actions(signatures: 0, views: 0)
+  create_user_with_tracked_actions(signatures: 3, views: 0)
+  create_user_with_tracked_actions(signatures: 1, views: 0)
+  create_user_with_tracked_actions(signatures: 2, views: 1)
 end
 
-def track_view(action_page)
-  ahoy.track "View",
-    { type: "action", actionType: "view", actionPageId: action_page.id },
-    action_page: action_page
+def user_with_tracked_actions(signatures: 1, views: 1)
+  user = FactoryBot.create(:user, record_activity: true)
+  signatures.times do
+    action = FactoryBot.create(:action_page_with_petition)
+    FactoryBot.create(:ahoy_signature, action_page: action, user: user)
+  end
+  views.times do
+    action = FactoryBot.create(:action_page_with_email)
+    FactoryBot.create(:ahoy_view, action_page: action, user: user)
+  end
 end
diff --git a/spec/queries/action_page_filters_spec.rb b/spec/queries/action_page_filters_spec.rb
index c232c9d2f..0a77dc922 100644
--- a/spec/queries/action_page_filters_spec.rb
+++ b/spec/queries/action_page_filters_spec.rb
@@ -2,20 +2,20 @@
 
 describe ActionPageFilters do
   it "returns only actions matching the given filters" do
-    category = FactoryGirl.create(:category)
-    basic = FactoryGirl.create(:action_page)
-    category_action = FactoryGirl.create(:action_page,
-                                         enable_tweet: true,
-                                         category: category)
-    draft_old = FactoryGirl.create(:action_page,
-                                   enable_tweet: true,
-                                   published: false,
-                                   created_at: Time.zone.today - 7.days)
-    authored_old = FactoryGirl.create(:action_page,
-                                      enable_tweet: true,
-                                      created_at: Time.zone.today - 7.days,
-                                      author: FactoryGirl.create(:user),
-                                      category: category)
+    category = FactoryBot.create(:category)
+    basic = FactoryBot.create(:action_page)
+    category_action = FactoryBot.create(:action_page,
+                                        enable_tweet: true,
+                                        category: category)
+    draft_old = FactoryBot.create(:action_page,
+                                  enable_tweet: true,
+                                  published: false,
+                                  created_at: Time.zone.today - 7.days)
+    authored_old = FactoryBot.create(:action_page,
+                                     enable_tweet: true,
+                                     created_at: Time.zone.today - 7.days,
+                                     author: FactoryBot.create(:user),
+                                     category: category)
     new_date_range = "#{Time.zone.today - 3.days} - #{Time.zone.today}"
 
     result = described_class.run(category: category)
@@ -32,13 +32,13 @@
   end
 
   it "does not filter when values are blank or 'all'" do
-    FactoryGirl.create(:action_page)
-    FactoryGirl.create(:action_page, enable_tweet: true,
-                       category: FactoryGirl.create(:category))
-    FactoryGirl.create(:action_page, enable_tweet: true, published: false,
-                       created_at: Time.zone.today - 7.days)
+    FactoryBot.create(:action_page)
+    FactoryBot.create(:action_page, enable_tweet: true,
+                                    category: FactoryBot.create(:category))
+    FactoryBot.create(:action_page, enable_tweet: true, published: false,
+                                    created_at: Time.zone.today - 7.days)
     result = described_class.run(category: "all", type: "", status: "all",
-                                   author: "", date_range: "")
+                                 author: "", date_range: "")
     expect(result.size).to eq(3)
   end
 
diff --git a/spec/queries/top_institutions_query_spec.rb b/spec/queries/top_institutions_query_spec.rb
new file mode 100644
index 000000000..0384889aa
--- /dev/null
+++ b/spec/queries/top_institutions_query_spec.rb
@@ -0,0 +1,46 @@
+require "rails_helper"
+
+describe TopInstitutionsQuery do
+  describe ".run" do
+    # TODO: rewrite to use action page as the main reference record? the
+    # petition is never actually used beyond its ID
+    let(:petition) { FactoryBot.create(:local_organizing_petition) }
+
+    def create_university_for(p, **attrs)
+      p.action_page.institutions.create(category: "University", **attrs)
+    end
+
+    def student_sign(p, institution, **attrs)
+      sig = FactoryBot.create(:signature, petition_id: p.id)
+      sig.affiliations.create(institution_id: institution.id, **attrs)
+    end
+
+    let(:high_rank) { create_university_for(petition, name: "A") }
+    let(:mid_rank) { create_university_for(petition, name: "B") }
+    let(:low_rank) { create_university_for(petition, name: "C") }
+
+    let(:student) { petition.action_page.affiliation_types.find_or_create_by!(name: "Student") }
+
+    before(:each) do
+      100.times { student_sign(petition, high_rank, affiliation_type: student) }
+      50.times { student_sign(petition, mid_rank, affiliation_type: student) }
+      10.times { student_sign(petition, low_rank, affiliation_type: student) }
+    end
+
+    it "should return the top n institutions ordered by number of signatures" do
+      expect(
+        described_class.run(action_page: petition.action_page, limit: 3)
+                       .map(&:id)
+      ).to eq([high_rank, mid_rank, low_rank].map(&:id))
+    end
+
+    it "allows exclusions from results" do
+      expect(
+        described_class.run(action_page: petition.action_page,
+                            limit: 3,
+                            exclude: [low_rank])
+                       .map(&:id)
+      ).to eq([high_rank.id, mid_rank.id, high_rank.id - 1])
+    end
+  end
+end
diff --git a/spec/rails_helper.rb b/spec/rails_helper.rb
index 9c8ec65d4..0f3bac286 100644
--- a/spec/rails_helper.rb
+++ b/spec/rails_helper.rb
@@ -1,12 +1,11 @@
 # This file is copied to spec/ when you run 'rails generate rspec:install'
 ENV["RAILS_ENV"] ||= "test"
-require File.expand_path("../../config/environment", __FILE__)
+require_relative "../config/environment"
 # Prevent database truncation if the environment is production
 abort("The Rails environment is running in production mode!") if Rails.env.production?
 require "spec_helper"
 require "rspec/rails"
 require "selenium/webdriver"
-require "webdrivers"
 
 # Add additional requires below this line. Rails is not loaded until this point!
 
@@ -29,43 +28,40 @@
 # If you are not using ActiveRecord, you can remove this line.
 ActiveRecord::Migration.maintain_test_schema!
 
-
-capabilities = Selenium::WebDriver::Remote::Capabilities.chrome(
-  :loggingPrefs => {
-    browser: "ALL",
-    client: "ALL",
-    driver: "ALL",
-    server: "ALL"
-  },
-  "chromeOptions" => {
-    "w3c" => false,
-    "args" => ["headless", "disable-gpu", "--window-size=1400,900"].tap do |a|
-      a.push("no-sandbox") if ENV["TRAVIS"]
-    end
-  }
-)
-
-Capybara.register_driver :chrome_headless do |app|
-  Capybara::Selenium::Driver.new(app, browser: :chrome,
-                                 desired_capabilities: capabilities)
-end
-
 Capybara.server = :puma
-Capybara.javascript_driver = :chrome_headless
+Capybara.register_driver :selenium_chrome_headless do |app|
+  # Capybara::Selenium::Driver.load_selenium
+  browser_options = Selenium::WebDriver::Chrome::Options.new.tap do |opts|
+    opts.args << "--window-size=1920,1080"
+    opts.args << "--force-device-scale-factor=0.95"
+    opts.args << "--headless"
+    opts.args << "--disable-gpu"
+    opts.args << "--disable-site-isolation-trials"
+    opts.args << "--no-sandbox"
+  end
+  Capybara::Selenium::Driver.new(app, browser: :chrome, options: browser_options)
+end
+Capybara.javascript_driver = :selenium_chrome_headless
 Capybara.enable_aria_label = true
+Capybara.disable_animation = true
 
 RSpec.configure do |config|
   config.include Devise::Test::ControllerHelpers, type: :controller
+  config.include Devise::Test::IntegrationHelpers, type: :system
+  config.include Devise::Test::IntegrationHelpers, type: :request
   config.include Warden::Test::Helpers, type: :request
-  config.include Warden::Test::Helpers, type: :feature
+  config.include Warden::Test::Helpers, type: :system
 
   # Remove this line if you're not using ActiveRecord or ActiveRecord fixtures
-  config.fixture_path = "#{::Rails.root}/spec/fixtures"
+  config.fixture_path = Rails.root.join("spec/fixtures")
 
   # If you're not using ActiveRecord, or you'd prefer not to run each of your
   # examples within a transaction, remove the following line or assign false
   # instead of true.
-  config.use_transactional_fixtures = false
+  config.use_transactional_fixtures = true
+
+  # Filter lines from Rails gems in backtraces.
+  config.filter_rails_from_backtrace!
 
   # RSpec Rails can automatically mix in different behaviours to your tests
   # based on their file location, for example enabling you to call `get` and
@@ -82,30 +78,21 @@
   # https://relishapp.com/rspec/rspec-rails/docs
   config.infer_spec_type_from_file_location!
 
-  config.before(:suite) { DatabaseCleaner.clean_with(:truncation) }
-  config.before(:each) { DatabaseCleaner.strategy = :transaction }
-  config.before(:each, js: true) { DatabaseCleaner.strategy = :truncation }
-  config.before(:each) { DatabaseCleaner.start }
-  config.after(:each) { DatabaseCleaner.clean }
-
-  config.before(:each, type: :feature) do
+  config.before(:each) do
     # disable call tool by default; it will be stubbed for tests that need it
-    disable_call_tool
+    allow(CallTool).to receive(:enabled?).and_return(false)
+  end
+
+  config.before(:each, type: :system) do
+    driven_by :rack_test
   end
 
-  FileUtils.mkdir_p("#{Rails.root}/tmp/cache")
+  config.before(:each, type: :system, js: true) do
+    driven_by :selenium_chrome_headless
+  end
+
+  FileUtils.mkdir_p(Rails.root.join("tmp/cache"))
   config.before(:each) do
     Rails.cache.clear
   end
 end
-
-# for request tests
-def login(user)
-  login_path = "/login"
-  post login_path, params: {
-    user: {
-      email: user.email,
-      password: "strong passwords defeat lobsters covering wealth"
-    }
-  }
-end
diff --git a/spec/requests/action_pages_spec.rb b/spec/requests/action_pages_spec.rb
index 328922e21..ed3d88fea 100644
--- a/spec/requests/action_pages_spec.rb
+++ b/spec/requests/action_pages_spec.rb
@@ -3,7 +3,7 @@
 RSpec.describe "Action Pages", type: :request do
   describe "small petition" do
     before(:each) do
-      @action_page = FactoryGirl.create(:petition_with_99_signatures_needing_1_more).action_page
+      @action_page = FactoryBot.create(:petition_with_99_signatures_needing_1_more).action_page
     end
 
     it "lists action pages" do
@@ -25,7 +25,7 @@
 
   describe "large petition" do
     it "should present the count of signatures" do
-      @action_page = FactoryGirl.create(:petition_complete_with_one_thousand_signatures).action_page
+      @action_page = FactoryBot.create(:petition_complete_with_one_thousand_signatures).action_page
 
       path = "#{action_page_path(@action_page)}/signature_count"
       get path
@@ -33,4 +33,50 @@
       expect(response.body).to eq "1000"
     end
   end
+
+  describe "json" do
+    it "returns json" do
+      FactoryBot.create(:action_page)
+      get "/action.json"
+      expect(response.code).to eq "200"
+      expect(response.parsed_body).to include(a_hash_including({ "title" => "Sample Action Page" }))
+    end
+
+    it "returns image attributes in json" do
+      stub_request(:get, %r{fakeimages/test.png}).to_return(status: 200, body: fixture_file_upload("test-image.png", "image/png").tempfile.to_io, headers: { content_type: "image/png" })
+      stub_request(:any, %r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png}).to_return(status: 200, body: "", headers: {})
+      FactoryBot.create(:action_page, remote_featured_image_url: "https://example.com/fakeimages/test.png")
+
+      get "/action.json"
+      expect(response.code).to eq "200"
+      expect(response.parsed_body).to include(a_hash_including({
+        "title" => "Sample Action Page",
+        "featured_image" => a_hash_including({
+          "alt" => "Test.Png",
+          "url" => a_string_matching(%r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png})
+        })
+      }))
+    end
+  end
+
+  describe "atom" do
+    it "returns atom" do
+      FactoryBot.create(:action_page)
+      get "/action.atom"
+      expect(response.code).to eq "200"
+      expect(response.body).to match("Sample Action Page")
+    end
+
+    it "returns image attributes in atom" do
+      allow_any_instance_of(ActionPageImageUploader).to receive(:content_type).and_return("image/png")
+      stub_request(:get, %r{fakeimages/test.png}).to_return(status: 200, body: file_fixture("test-image.png").read, headers: { content_type: "image/png" })
+      stub_request(:any, %r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png}).to_return(status: 200, body: file_fixture("test-image.png").read, headers: { content_type: "image/png" })
+      FactoryBot.create(:action_page, remote_featured_image_url: "https://example.com/fakeimages/test.png")
+
+      get "/action.atom"
+      expect(response.code).to eq "200"
+      expect(response.body).to match("Sample Action Page")
+      expect(response.body).to match(%r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test.png})
+    end
+  end
 end
diff --git a/spec/requests/admin/action_pages_spec.rb b/spec/requests/admin/action_pages_spec.rb
index 4362c8570..c573adecc 100644
--- a/spec/requests/admin/action_pages_spec.rb
+++ b/spec/requests/admin/action_pages_spec.rb
@@ -16,16 +16,16 @@
 
   describe "Non-Privileged Users" do
     it "should prevent them creating action pages" do
-      expect {
+      expect do
         post "/admin/action_pages", params: valid_attributes
-      }.to raise_exception(ActiveRecord::RecordNotFound)
+      end.to raise_exception(ActiveRecord::RecordNotFound)
     end
   end
 
   describe "Admins" do
     before(:each) do
-      @admin = FactoryGirl.create(:admin_user)
-      login @admin
+      @admin = FactoryBot.create(:admin_user)
+      sign_in @admin
     end
 
     it "should allow them creating action pages with valid attributes" do
@@ -38,8 +38,28 @@
       expect(ActionPage.count).to eq 1
     end
 
+    it "should allow them to specify a featured image" do
+      valid_attributes[:action_page][:remote_featured_image_url] = "https://example.com/fakeimages/test-featured-image.png"
+      valid_attributes[:action_page][:remote_og_image_url] = "https://example.com/fakeimages/test-og-image.png"
+      test_image_file_upload = file_fixture("test-image.png").read
+      stub_request(:get, %r{fakeimages/test-featured-image.png}).to_return(status: 200, body: test_image_file_upload, headers: { content_type: "image/png" })
+      stub_request(:any, %r{/action_pages/featured_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test-featured-image.png}).to_return(status: 200, body: "", headers: {})
+      stub_request(:get, %r{fakeimages/test-og-image.png}).to_return(status: 200, body: test_image_file_upload, headers: { content_type: "image/png" })
+      stub_request(:any, %r{/action_pages/og_images/([0-9]+)/([0-9]+)/([0-9]+)/original/test-og-image.png}).to_return(status: 200, body: "", headers: {})
+
+      post "/admin/action_pages", params: valid_attributes
+
+      expect(response).to redirect_to(assigns(:actionPage))
+      follow_redirect!
+
+      expect(response.code).to eq "200"
+      expect(ActionPage.count).to eq 1
+      expect(response.body).to match("test-featured-image")
+      expect(response.body).to match("test-og-image")
+    end
+
     it "should allow them to search action pages" do
-      border = FactoryGirl.create(
+      border = FactoryBot.create(
         :action_page_with_petition,
         title: "borderpetition",
         petition_attributes: {
@@ -47,23 +67,23 @@
         }
       )
 
-      privacy = FactoryGirl.create(
+      privacy = FactoryBot.create(
         :action_page_with_petition,
         title: "privacypetition",
         petition_attributes: { description: "online privacy" }
       )
 
-      tweet = FactoryGirl.create(
+      tweet = FactoryBot.create(
         :action_page_with_tweet,
         title: "bordertweet",
         tweet_attributes: { message: "border surveillance tweet" }
       )
 
-      xhr :get, "/admin/action_pages?q=border+surveil"
+      get "/admin/action_pages?q=border+surveil", xhr: true
 
-      expect(response.body).to include("borderpetition")
-      expect(response.body).to include("bordertweet")
-      expect(response.body).not_to include("privacypetition")
+      expect(response.body).to include(border.title)
+      expect(response.body).to include(tweet.title)
+      expect(response.body).not_to include(privacy.title)
     end
   end
 end
diff --git a/spec/requests/admin/events_spec.rb b/spec/requests/admin/events_spec.rb
index f47f72966..712ded15c 100644
--- a/spec/requests/admin/events_spec.rb
+++ b/spec/requests/admin/events_spec.rb
@@ -1,64 +1,62 @@
 require "rails_helper"
 
 RSpec.describe "Admin Action Page Analytics", type: :request do
-  let(:action_page) { FactoryGirl.create(:action_page_with_views) }
-  before { login FactoryGirl.create(:admin_user) }
+  let(:action_page) { FactoryBot.create(:action_page_with_views) }
+  before { sign_in FactoryBot.create(:admin_user) }
 
   describe "#index" do
     context "with type param" do
       it "responds with views over time as JSON" do
-        expect(Time.zone).
-          to receive(:now).
-              and_return(Time.local(2019)).
-              at_least(:once)
+        expect(Time.zone)
+          .to receive(:now)
+          .and_return(Time.zone.local(2019))
+          .at_least(:once)
 
         get "/admin/action_pages/#{action_page.slug}/events",
-          params: { type: "views" },
-          headers: { "ACCEPT" => "application/json" }
+            params: { type: "views" },
+            headers: { "ACCEPT" => "application/json" }
 
         expect(response.code).to eq "200"
 
         # Default is to return data for the previous month.
-        expect(JSON.parse(response.body).keys).
-          to include(*(1..31).map { |i| sprintf("Dec %d 2018", i) })
+        expect(response.parsed_body.keys)
+          .to include(*(1..31).map { |i| format("Dec %d 2018", i) })
       end
 
       it "filters by date" do
-        start_date = Time.utc(2019, 1, 1).strftime("%Y-%m-%d")
-        end_date = Time.utc(2019, 1, 7).strftime("%Y-%m-%d")
         get "/admin/action_pages/#{action_page.slug}/events",
-          params: {
-            date_range_text: "Jan 1, 2019 - Jan 8, 2019",
-            type: "views"
-          },
-          headers: { "ACCEPT" => "application/json" }
+            params: {
+              date_range_text: "Jan 1, 2019 - Jan 8, 2019",
+              type: "views"
+            },
+            headers: { "ACCEPT" => "application/json" }
 
         # Returns one datapoint per day in range.
-        expect(JSON.parse(response.body).keys).
-          to eq([
-                  "Jan 1 2019",
-                  "Jan 2 2019",
-                  "Jan 3 2019",
-                  "Jan 4 2019",
-                  "Jan 5 2019",
-                  "Jan 6 2019",
-                  "Jan 7 2019",
-                  "Jan 8 2019"
-                ])
+        expect(response.parsed_body.keys)
+          .to eq([
+                   "Jan 1 2019",
+                   "Jan 2 2019",
+                   "Jan 3 2019",
+                   "Jan 4 2019",
+                   "Jan 5 2019",
+                   "Jan 6 2019",
+                   "Jan 7 2019",
+                   "Jan 8 2019"
+                 ])
       end
     end
 
     context "without type param" do
       before do
-        allow(Time.zone).to receive(:now).and_return(Time.local(2019))
+        allow(Time.zone).to receive(:now).and_return(Time.zone.local(2019))
         action_page.update(
           enable_petition: true,
           petition_id: Petition.create.id
         )
 
-        FactoryGirl.create(:ahoy_signature,
-                           action_page: action_page,
-                           time: Time.zone.now)
+        FactoryBot.create(:ahoy_signature,
+                          action_page: action_page,
+                          time: Time.zone.now)
       end
 
       it "renders html" do
@@ -67,5 +65,4 @@
       end
     end
   end
-
 end
diff --git a/spec/requests/admin/petition_spec.rb b/spec/requests/admin/petition_spec.rb
index c95c04705..f29385057 100644
--- a/spec/requests/admin/petition_spec.rb
+++ b/spec/requests/admin/petition_spec.rb
@@ -3,12 +3,12 @@
 RSpec.describe "Admin Action Pages", type: :request do
   describe "admins" do
     before(:each) do
-      @admin = FactoryGirl.create(:admin_user)
-      login @admin
+      @admin = FactoryBot.create(:admin_user)
+      sign_in @admin
     end
 
     it "should let admins download the CSV" do
-      @petition = FactoryGirl.create(:petition_complete_with_one_hundred_signatures)
+      @petition = FactoryBot.create(:petition_complete_with_one_hundred_signatures)
 
       get "/admin/petitions/#{@petition.id}/presentable_csv"
 
diff --git a/spec/requests/admin/s3_uploads_spec.rb b/spec/requests/admin/s3_uploads_spec.rb
index 7f6eb0bfe..bee088479 100644
--- a/spec/requests/admin/s3_uploads_spec.rb
+++ b/spec/requests/admin/s3_uploads_spec.rb
@@ -1,18 +1,20 @@
 require "rails_helper"
 
 RSpec.describe "S3 Uploads Spec", type: :request do
-  let(:valid_attributes) { {
-    "source_file" => {
-      "bucket" => "actioncenter-staging",
-      "file_name" => "img.png",
-      "file_content_type" => "image",
-      "file_size" => "10",
-      "key" => "uploads/3be325f2b4e64d9d92a89405577280a4/img.png"
- },
-    "action" => "create",
-    "controller" => "admin/s3_uploads",
-    "format" => "json"
-  } }
+  let(:valid_attributes) do
+    {
+      "source_file" => {
+        "bucket" => "actioncenter-staging",
+        "file_name" => "img.png",
+        "file_content_type" => "image",
+        "file_size" => "10",
+        "key" => "uploads/3be325f2b4e64d9d92a89405577280a4/img.png"
+      },
+      "action" => "create",
+      "controller" => "admin/s3_uploads",
+      "format" => "json"
+    }
+  end
 
   before(:each) do
     # bypasses a 3rd party lookup (s3)
@@ -20,17 +22,30 @@
   end
 
   it "should deny non-admins" do
-    expect {
+    expect do
       post "/admin/source_files", params: valid_attributes
-    }.to raise_exception(ActiveRecord::RecordNotFound)
+    end.to raise_exception(ActiveRecord::RecordNotFound)
   end
 
   it "should allow admins" do
-    @admin = FactoryGirl.create(:admin_user)
-    login @admin
+    sign_in FactoryBot.create(:admin_user)
 
-    expect {
+    expect do
       post "/admin/source_files", params: valid_attributes
-    }.to change { SourceFile.count }.by(1)
+    end.to change { SourceFile.count }.by(1)
+  end
+
+  it "should have valid response" do
+    sign_in FactoryBot.create(:admin_user)
+
+    post "/admin/source_files", params: valid_attributes
+
+    expect(response.parsed_body).to include(
+      "delete_url" => a_string_matching(%r{/admin/source_files/[0-9]+.json}),
+      "full_url" => a_string_matching(%r{/uploads/3be325f2b4e64d9d92a89405577280a4/img.png}),
+      "image" => true,
+      "name" => "img.png",
+      "size" => 10
+    )
   end
 end
diff --git a/spec/requests/admin/users_spec.rb b/spec/requests/admin/users_spec.rb
index bb1bf9dab..0017abd31 100644
--- a/spec/requests/admin/users_spec.rb
+++ b/spec/requests/admin/users_spec.rb
@@ -2,14 +2,14 @@
 
 RSpec.describe "Admin Users", type: :request do
   before(:each) do
-    admin = FactoryGirl.create(:admin_user)
-    login admin
+    admin = FactoryBot.create(:admin_user)
+    sign_in admin
   end
 
   describe "#index" do
     before do
       10.times do |n|
-        FactoryGirl.create(:user, created_at: Time.now - n.days, email: "user-#{n}@example.com")
+        FactoryBot.create(:user, created_at: Time.zone.now - n.days, email: "user-#{n}@example.com")
       end
     end
 
diff --git a/spec/requests/congress_messages_spec.rb b/spec/requests/congress_messages_spec.rb
index ab20708a0..999912027 100644
--- a/spec/requests/congress_messages_spec.rb
+++ b/spec/requests/congress_messages_spec.rb
@@ -1,16 +1,16 @@
 require "rails_helper"
 
 RSpec.describe "Congress Messages", type: :request do
-  let!(:members) {
-    [FactoryGirl.create(:congress_member, state: "CA", bioguide_id: "C000880"),
-     FactoryGirl.create(:congress_member, state: "CA", bioguide_id: "A000360")]
-  }
+  let!(:members) do
+    [FactoryBot.create(:congress_member, state: "CA", bioguide_id: "C000880"),
+     FactoryBot.create(:congress_member, state: "CA", bioguide_id: "A000360")]
+  end
 
-  let(:action_page) {
-    FactoryGirl.create(:action_page_with_congress_message)
-  }
+  let(:action_page) do
+    FactoryBot.create(:action_page_with_congress_message)
+  end
 
-  let(:location) {
+  let(:location) do
     OpenStruct.new(success: true,
                    street: "1630 Ravello Drive",
                    city: "Sunnydale",
@@ -18,20 +18,20 @@
                    zip4: 1234,
                    state: "CA",
                    district: 10)
-  }
+  end
 
   def stub_congress_forms_find_with_two_reps
-    stub_request(:post, /retrieve-form-elements/).
-      with(body: { "bio_ids" => ["C000880", "A000360"] }).
-      and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
+    stub_request(:post, /retrieve-form-elements/)
+      .with(body: { "bio_ids" => %w[C000880 A000360] })
+      .and_return(status: 200, body: file_fixture("retrieve-form-elements.json"))
   end
 
   def stub_congress_forms_find_with_one_rep
     forms_body = JSON.parse(file_fixture("retrieve-form-elements.json").read)
     forms_body.delete("A000360")
-    stub_request(:post, /retrieve-form-elements/).
-      with(body: { "bio_ids" => ["C000880"] }).
-      and_return(status: 200, body: forms_body.to_json)
+    stub_request(:post, /retrieve-form-elements/)
+      .with(body: { "bio_ids" => ["C000880"] })
+      .and_return(status: 200, body: forms_body.to_json)
   end
 
   before do
@@ -73,7 +73,7 @@ def get_congress_message_form
       end
 
       it "to target bioguide_ids" do
-        campaign = FactoryGirl.create(:congress_message_campaign, :targeting_bioguide_ids)
+        campaign = FactoryBot.create(:congress_message_campaign, :targeting_bioguide_ids)
         action_page.update_attribute(:congress_message_campaign, campaign)
         get_congress_message_form
         expect(response.body).to include("C000880")
@@ -81,8 +81,8 @@ def get_congress_message_form
       end
 
       it "to target a single chamber" do
-        members.last.update_attributes(chamber: "house", district: 10)
-        campaign = FactoryGirl.create(:congress_message_campaign, :targeting_senate)
+        members.last.update(chamber: "house", district: 10)
+        campaign = FactoryBot.create(:congress_message_campaign, :targeting_senate)
         action_page.update_attribute(:congress_message_campaign, campaign)
         get_congress_message_form
         expect(response.body).to include("C000880")
@@ -101,13 +101,13 @@ def get_congress_message_form
           "$ADDRESS_CITY" => "Sunnydale",
           "$ADDRESS_ZIP5" => "94109",
           "$EMAIL" => "jsummers@altavista.com",
-          "$NAME_PREFIX" => "Mrs.",
+          "$NAME_PREFIX" => "Mrs."
         },
         member_attributes: {
           "C000880" => {
             "$SUBJECT" => "Take Action",
             "$ADDRESS_STATE_POSTAL_ABBREV" => "CA",
-            "$TOPIC" => "JU",
+            "$TOPIC" => "JU"
           },
           "A000360" => {
             "$ADDRESS_STATE" => "CA",
@@ -115,7 +115,7 @@ def get_congress_message_form
           }
         },
         forms: {
-          bioguide_ids: %w(C000880 A000360)
+          bioguide_ids: %w[C000880 A000360]
         },
         message: "Impeach Mayor Richard Wilkins III"
       }
@@ -129,30 +129,30 @@ def submit_congress_message
     end
 
     before do
-      stub_request(:post, /fill-out-form/).
-        and_return(status: 200, body: "{}")
+      stub_request(:post, /fill-out-form/)
+        .and_return(status: 200, body: "{}")
     end
 
-    it "successfully submits good input" do
+    it "successfully submits good input", :run_delayed_jobs do
       submit_congress_message
-      expect(WebMock).to have_requested(:post, /fill-out-form/).
-        with(body: {
-        "bio_id": "C000880",
-        "fields": {
-          "$NAME_FIRST": "Joyce",
-          "$NAME_LAST": "Summers",
-          "$ADDRESS_STREET": "1630 Ravello Drive",
-          "$ADDRESS_CITY": "Sunnydale",
-          "$ADDRESS_ZIP5": "94109",
-          "$EMAIL": "jsummers@altavista.com",
-          "$SUBJECT": "Take Action",
-          "$NAME_PREFIX": "Mrs.",
-          "$ADDRESS_STATE_POSTAL_ABBREV": "CA",
-          "$MESSAGE": "Impeach Mayor Richard Wilkins III",
-          "$TOPIC": "JU"
-        },
-        campaign_tag: "a campaign tag"
-      })
+      expect(WebMock).to have_requested(:post, /fill-out-form/)
+        .with(body: {
+                "bio_id": "C000880",
+                "fields": {
+                  "$NAME_FIRST": "Joyce",
+                  "$NAME_LAST": "Summers",
+                  "$ADDRESS_STREET": "1630 Ravello Drive",
+                  "$ADDRESS_CITY": "Sunnydale",
+                  "$ADDRESS_ZIP5": "94109",
+                  "$EMAIL": "jsummers@altavista.com",
+                  "$SUBJECT": "Take Action",
+                  "$NAME_PREFIX": "Mrs.",
+                  "$ADDRESS_STATE_POSTAL_ABBREV": "CA",
+                  "$MESSAGE": "Impeach Mayor Richard Wilkins III",
+                  "$TOPIC": "JU"
+                },
+                campaign_tag: "a campaign tag"
+              })
     end
 
     it "returns an error when validation fails" do
@@ -162,34 +162,16 @@ def submit_congress_message
       expect(WebMock).not_to have_requested(:post, /fill-out-form/)
     end
 
-    it "enables test mode" do
+    it "enables test mode", :run_delayed_jobs do
       message_attributes[:test] = 1
       submit_congress_message
       expect(response.status).to eq 200
-      expect(WebMock).to have_requested(:post, /fill-out-form/).
-        with(body: hash_including(test: 1)).twice
+      expect(WebMock).to have_requested(:post, /fill-out-form/)
+        .with(body: hash_including(test: 1)).twice
     end
 
-    it "succeeds with no common attributs" do
+    it "succeeds with no common attributes" do
       stub_congress_forms_find_with_one_rep
-      message_attributes = {
-        member_attributes: {
-          "C000880" => {
-            "$NAME_FIRST" => "Joyce",
-            "$NAME_LAST" => "Summers",
-            "$ADDRESS_STREET" => "1630 Ravello Drive",
-            "$ADDRESS_CITY" => "Sunnydale",
-            "$ADDRESS_ZIP5" => "94109",
-            "$EMAIL" => "jsummers@altavista.com",
-            "$NAME_PREFIX" => "Mrs.",
-            "$MESSAGE" => "Impeach Mayor Richard Wilkins III",
-            "$SUBJECT" => "Take Action",
-            "$ADDRESS_STATE_POSTAL_ABBREV" => "CA",
-            "$TOPIC" => "JU",
-          }
-        },
-        bioguide_ids: "C000880"
-      }
       submit_congress_message
       expect(response.status).to eq 200
     end
diff --git a/spec/requests/registrations_spec.rb b/spec/requests/registrations_spec.rb
index 44e655dbd..9dabfc0d3 100644
--- a/spec/requests/registrations_spec.rb
+++ b/spec/requests/registrations_spec.rb
@@ -15,10 +15,8 @@
         }
       }
     end
-    subject { post "/", params: valid_attributes }
-
     it "creates users" do
-      subject
+      post "/", params: valid_attributes
       expect(response.code).to eq "302"
       expect(User.count).to eq 1
       # Expect an email confirmation message.
@@ -26,7 +24,7 @@
     end
 
     it "lets unconfirmed users register a new password" do
-      subject
+      post "/", params: valid_attributes
       # Attempt to re-register+confirm with a new password,
       post "/", params: {
         user: {
diff --git a/spec/requests/sns_spec.rb b/spec/requests/sns_spec.rb
index 39b6a1643..e033ac71a 100644
--- a/spec/requests/sns_spec.rb
+++ b/spec/requests/sns_spec.rb
@@ -10,8 +10,8 @@
       headers = { "CONTENT_TYPE" => "application/json" }
       body = File.read("./spec/fixtures/files/sns_complaint.json")
       post "/complaint/#{Rails.application.secrets.amazon_authorize_key}",
-        params: body, headers: headers
-      expect(JSON.parse(response.body)["success"]).to be true
+           params: body, headers: headers
+      expect(response.parsed_body["success"]).to be true
       expect(Complaint.count).to eq 1
     end
   end
diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
index 21581c358..75aad5781 100644
--- a/spec/spec_helper.rb
+++ b/spec/spec_helper.rb
@@ -1,30 +1,8 @@
 require "capybara/rspec"
 require "webmock/rspec"
-Dir[Rails.root.join("spec/support/**/*.rb")].each { |f| require f }
+Dir[Rails.root.join("spec/support/**/*.rb")].sort.each { |f| require f }
 
-# This file was generated by the `rails generate rspec:install` command. Conventionally, all
-# specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
-# The generated `.rspec` file contains `--require spec_helper` which will cause
-# this file to always be loaded, without a need to explicitly require it in any
-# files.
-#
-# Given that it is always loaded, you are encouraged to keep this file as
-# light-weight as possible. Requiring heavyweight dependencies from this file
-# will add to the boot time of your test suite on EVERY test run, even for an
-# individual file that may not need all of that loaded. Instead, consider making
-# a separate helper file that requires the additional dependencies and performs
-# the additional setup, and require it from the spec files that actually need
-# it.
-#
-# The `.rspec` file also contains a few flags that are not defaults but that
-# users commonly want.
-#
-# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
 RSpec.configure do |config|
-  config.before(:each) do
-    DatabaseCleaner.clean_with :truncation
-  end
-
   # rspec-expectations config goes here. You can use an alternate
   # assertion/expectation library such as wrong or the stdlib/minitest
   # assertions if you prefer.
@@ -48,60 +26,16 @@
     mocks.verify_partial_doubles = true
   end
 
-  config.include Capybara::DSL
-  config.include FeatureHelpers, type: :feature
-
-  WebMock.disable_net_connect!(allow_localhost: true)
-
-# The settings below are suggested to provide a good initial experience
-# with RSpec, but feel free to customize to your heart's content.
-=begin
-  # These two settings work together to allow you to limit a spec run
-  # to individual examples or groups you care about by tagging them with
-  # `:focus` metadata. When nothing is tagged with `:focus`, all examples
-  # get run.
-  config.filter_run :focus
-  config.run_all_when_everything_filtered = true
-
-  # Allows RSpec to persist some state between runs in order to support
-  # the `--only-failures` and `--next-failure` CLI options. We recommend
-  # you configure your source control system to ignore this file.
-  config.example_status_persistence_file_path = "spec/examples.txt"
-
-  # Limits the available syntax to the non-monkey patched syntax that is
-  # recommended. For more details, see:
-  #   - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
-  #   - http://www.teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
-  #   - http://myronmars.to/n/dev-blog/2014/05/notable-changes-in-rspec-3#new__config_option_to_disable_rspeccore_monkey_patching
-  config.disable_monkey_patching!
-
-  # Many RSpec users commonly either run the entire suite or an individual
-  # file, and it's useful to allow more verbose output when running an
-  # individual spec file.
-  if config.files_to_run.one?
-    # Use the documentation formatter for detailed output,
-    # unless a formatter has already been configured
-    # (e.g. via a command-line flag).
-    config.default_formatter = 'doc'
+  config.around(:each, :run_delayed_jobs) do |example|
+    Delayed::Worker.delay_jobs = false
+    example.run
+    Delayed::Worker.delay_jobs = true
   end
 
-  # Print the 10 slowest examples and example groups at the
-  # end of the spec run, to help surface which specs are running
-  # particularly slow.
-  config.profile_examples = 10
-
-  # Run specs in random order to surface order dependencies. If you find an
-  # order dependency and want to debug it, you can fix the order by providing
-  # the seed, which is printed after each run.
-  #     --seed 1234
-  config.order = :random
+  config.include Capybara::DSL
+  config.include FeatureHelpers, type: :feature
 
-  # Seed global randomization in this process using the `--seed` CLI option.
-  # Setting this allows you to use `--seed` to deterministically reproduce
-  # test failures related to randomization by passing the same `--seed` value
-  # as the one that triggered the failure.
-  Kernel.srand config.seed
-=end
+  WebMock.disable_net_connect!(allow_localhost: true, allow: "chromedriver.storage.googleapis.com")
 end
 
 # Don't prevent form fills by bots during the test run
@@ -109,27 +43,16 @@
   config.timestamp_enabled = false
 end
 
-# for controller tests
-def login_as_admin
-  @request.env["devise.mapping"] = Devise.mappings[:admin]
-  sign_in FactoryGirl.create(:admin_user)
-end
-
-def login_as_collaborator
-  @request.env["devise.mapping"] = Devise.mappings[:admin]
-  sign_in FactoryGirl.create(:collaborator_user)
-end
-
 def set_weak_password(user)
   weak_password = "12345678"
   user.password = weak_password
   user.password_confirmation = weak_password
-  result = user.save
+  user.save
 end
 
 def set_strong_password(user)
   weak_password = "strong passwords defeat lobsters covering wealth"
   user.password = weak_password
   user.password_confirmation = weak_password
-  result = user.save
+  user.save
 end
diff --git a/spec/support/exit_code_helpers.rb b/spec/support/exit_code_helpers.rb
index 2c2eb6614..b1d82e35d 100644
--- a/spec/support/exit_code_helpers.rb
+++ b/spec/support/exit_code_helpers.rb
@@ -14,11 +14,11 @@ def supports_block_expectations?
     actual and actual == exp_code
   end
 
-  failure_message do |block|
+  failure_message do |_block|
     "expected block to call exit(#{exp_code}) but exit" +
       (actual.nil? ? " not called" : "(#{actual}) was called")
   end
-  failure_message_when_negated do |block|
+  failure_message_when_negated do |_block|
     "expected block not to call exit(#{exp_code})"
   end
   description do
diff --git a/spec/support/feature_helpers.rb b/spec/support/feature_helpers.rb
index 2ae488dcf..13e063c84 100644
--- a/spec/support/feature_helpers.rb
+++ b/spec/support/feature_helpers.rb
@@ -7,13 +7,14 @@ def sign_in_user(user)
     click_button "Sign in"
   end
 
-  def disable_call_tool
-    allow(CallTool).to receive(:enabled?).and_return(false)
+  def sign_out_user(_user)
+    find("#nav-modal-toggle").click
+    find("input[value='Logout']", visible: :all, match: :first).click
   end
 
   def fill_in_editor(locator, with:)
     within_frame find(locator, visible: :all).sibling("div").find("iframe") do
-      within_frame find("iframe") do
+      within_frame find("#epiceditor-editor-frame") do
         find("body").set(with)
       end
     end
@@ -26,12 +27,10 @@ def fill_in_select2(locator, with:)
 
   def tempermental(try: 2.times)
     try.each do |attempt|
-      begin
-        yield
-        break
-      rescue RSpec::Expectations::ExpectationNotMetError => e
-        raise e if attempt == try.size - 1
-      end
+      yield
+      break
+    rescue RSpec::Expectations::ExpectationNotMetError => e
+      raise e if attempt == try.size - 1
     end
   end
 end
diff --git a/spec/support/service_helpers.rb b/spec/support/service_helpers.rb
index 5029aae42..ad6d3e618 100644
--- a/spec/support/service_helpers.rb
+++ b/spec/support/service_helpers.rb
@@ -1,12 +1,12 @@
 module ServiceHelpers
   def stub_civicrm
-    Rails.application.secrets.supporters["host"] = "https://civicrm.test"
-    stub_request(:post, CiviCRM::supporters_api_url).
-      and_return(status: 200, body: "{}", headers: {})
+    Rails.application.secrets.supporters[:host] = "https://civicrm.test"
+    stub_request(:post, Civicrm.supporters_api_url)
+      .and_return(status: 200, body: "{}", headers: {})
 
-    stub_request(:post, CiviCRM::supporters_api_url).
-      with(body: /generate_checksum/).
-      and_return(status: 200, body: { checksum: "xyz" }.to_json, headers: {})
+    stub_request(:post, Civicrm.supporters_api_url)
+      .with(body: /generate_checksum/)
+      .and_return(status: 200, body: { checksum: "xyz" }.to_json, headers: {})
   end
 end
 
@@ -14,4 +14,4 @@ def stub_civicrm
   c.include ServiceHelpers
 end
 
-World(ServiceHelpers) if respond_to?(:World) #cucumber
+World(ServiceHelpers) if respond_to?(:World) # cucumber
diff --git a/spec/tasks/signatures_spec.rb b/spec/tasks/signatures_spec.rb
index 9b0f5f7a1..ae8c56948 100644
--- a/spec/tasks/signatures_spec.rb
+++ b/spec/tasks/signatures_spec.rb
@@ -11,38 +11,38 @@
     after { Rake.application["signatures:deduplicate"].reenable }
 
     it "should delete signatures with non-unique emails from petitions" do
-      regular_petition = FactoryGirl.create(:petition_complete_with_one_hundred_signatures)
+      regular_petition = FactoryBot.create(:petition_complete_with_one_hundred_signatures)
 
-      petition_with_dups = FactoryGirl.create(:petition_complete_with_one_hundred_signatures)
+      petition_with_dups = FactoryBot.create(:petition_complete_with_one_hundred_signatures)
       petition_with_dups.signatures.take(20).each { |sig| sig.update_column(:email, "dup1@example.com") }
       petition_with_dups.signatures.take(10).each { |sig| sig.update_column(:email, "dup2@example.com") }
 
       distinct_emails = petition_with_dups.signatures.pluck(:email).uniq
 
       expect(regular_petition.signatures.select("email").distinct.count).to eq(100)
-      expect(petition_with_dups.signatures.select("email").distinct.count).to eq(82)
+      expect(petition_with_dups.signatures.select("email").distinct.count).to eq(72)
 
       Rake.application.invoke_task "signatures:deduplicate"
 
       # Check that regular petition was unaffected and that the other contains no duplicates
       expect(regular_petition.signatures.reload.count).to eq(100)
-      expect(petition_with_dups.signatures.reload.count).to eq(82)
+      expect(petition_with_dups.signatures.reload.count).to eq(72)
       expect(petition_with_dups.signatures.reload.pluck(:email)).to contain_exactly(*distinct_emails)
     end
 
     context "with duplicate subscriptions" do
-      let(:subscription) { FactoryGirl.create(:subscription) }
+      let(:subscription) { FactoryBot.create(:subscription) }
       let(:email) { subscription.email }
       let(:partner) { subscription.partner }
       let!(:owner_subscription2) do
-        FactoryGirl.create(:subscription, email: email)
+        FactoryBot.create(:subscription, email: email)
       end
       let!(:partner_subscription2) do
-        FactoryGirl.create(:subscription, partner: partner)
+        FactoryBot.create(:subscription, partner: partner)
       end
       let!(:dup_subscription) do
-        FactoryGirl.create(:subscription)
-                   .update_columns(email: email, partner_id: partner.id)
+        FactoryBot.create(:subscription)
+                  .update_columns(email: email, partner_id: partner.id)
       end
 
       it "removes the newer duplicates" do
diff --git a/spec/tasks/users_spec.rb b/spec/tasks/users_spec.rb
index 0e7bd1b5b..2e6165ef9 100644
--- a/spec/tasks/users_spec.rb
+++ b/spec/tasks/users_spec.rb
@@ -2,7 +2,7 @@
 require "rake"
 
 describe "User-related rake tasks" do
-  let(:user) { FactoryGirl.create(:user) }
+  let(:user) { FactoryBot.create(:user) }
   let(:email) { user.email }
   let(:run_task) { Rake.application.invoke_task "#{task}[#{email}]" }
 
@@ -56,7 +56,7 @@
   end
 
   describe "users:remove_admin" do
-    let(:user) { FactoryGirl.create(:user, admin: true) }
+    let(:user) { FactoryBot.create(:user, admin: true) }
     let(:task) { "users:remove_admin" }
 
     it "grants admin status to the given user" do
diff --git a/vendor/assets/stylesheets/animation.css.scss b/vendor/assets/stylesheets/animation.scss
similarity index 100%
rename from vendor/assets/stylesheets/animation.css.scss
rename to vendor/assets/stylesheets/animation.scss
diff --git a/vendor/assets/stylesheets/eff-icon-font-codes.css.scss b/vendor/assets/stylesheets/eff-icon-font-codes.scss
similarity index 100%
rename from vendor/assets/stylesheets/eff-icon-font-codes.css.scss
rename to vendor/assets/stylesheets/eff-icon-font-codes.scss
diff --git a/vendor/assets/stylesheets/eff-icon-font-embedded.css.scss b/vendor/assets/stylesheets/eff-icon-font-embedded.scss
similarity index 100%
rename from vendor/assets/stylesheets/eff-icon-font-embedded.css.scss
rename to vendor/assets/stylesheets/eff-icon-font-embedded.scss
diff --git a/vendor/assets/stylesheets/eff-icon-font-ie7-codes.css.scss b/vendor/assets/stylesheets/eff-icon-font-ie7-codes.scss
similarity index 100%
rename from vendor/assets/stylesheets/eff-icon-font-ie7-codes.css.scss
rename to vendor/assets/stylesheets/eff-icon-font-ie7-codes.scss
diff --git a/vendor/assets/stylesheets/eff-icon-font-ie7.css.scss b/vendor/assets/stylesheets/eff-icon-font-ie7.scss
similarity index 100%
rename from vendor/assets/stylesheets/eff-icon-font-ie7.css.scss
rename to vendor/assets/stylesheets/eff-icon-font-ie7.scss
diff --git a/vendor/assets/stylesheets/eff-icon-font.css.scss b/vendor/assets/stylesheets/eff-icon-font.scss
similarity index 100%
rename from vendor/assets/stylesheets/eff-icon-font.css.scss
rename to vendor/assets/stylesheets/eff-icon-font.scss