in SQL queries

include methods on #connection and delete_all/destroy_all
Fixes #434

fixes #422

 - Removed brackets where possible.
 - No more assignments in if-statements
 - Refactored out unsafe argument array checking

 - CVE checking is now a simple hash
 - Removed implicit returns
 - Removed duplicate code from find_scope_calls
 - Removed assignments from if statements
 - Bracketed ambiguos statements
 - Onelined simple if statements 

http://api.rubyonrails.org/classes/ActiveRecord/Relation.html#method-i-update_all

Dynamic finders SQL injection vulnerability

in SQL injection, format validation, mass assignment,
and CVE-2010-3933 checks.

Should fix #107

make the check methods line up with the specific CVE numbers