Test more rubies

Version check for CVE-2012-5664

Dynamic finders SQL injection vulnerability

Check for secret_token

as suggested in #200

Only do one pass of alias processing + Pass instance variables through before_filters

Should really be one branch

Conflicts:
	test/tests/test_rails3.rb

Doing two passes was kind of a brute-force way to propagate some
variables in some cases, but it seems wasteful. It also makes
`--interprocedural` take even longer.

Fix CheckSessionSettings for Rails 3

Add optional simple helper method scanning for controllers

when one before_filter depends on ivars from another

Merge branch 'fix_session_settings_check_for_rails3' of github.com:presidentbeef/brakeman into fix_session_settings_check_for_rails3

Conflicts:
	lib/brakeman/checks/check_session_settings.rb

because I was dumb and hard-coded the name
of the app (i.e., MyApp::Application.config)

Fix CheckExecute treating all string interps same

and making user input medium confidence. Oops.

Ignore route information by default

Conflicts:
	test/tests/test_rails31.rb

in FindReturnValue

because it only matters if we care about routes

it messes up mixed-in methods and such

because I was dumb and hard-coded the name
of the app (i.e., MyApp::Application.config)

for genericness