to report the actual piece of code detected as user input for some
warnings

not a big change, it was already returning an array containing
the type and the matched value, but this simplifies/clarifies things.

Include all of lib in the gem

Update json output and add comparison feature for json

Bye bye ruport - 10 fewer dependencies (-13 + 3)

hooray!

This commit handles the conversion of:
* headers
* overviews
* warning_overviews
* controller/view debug output
* errors

Properly check for use of rails_xss gem

even if it's still a little broken in rescanning,
but how often will people be adding/removing rails_xss from their
Gemfile while rescanning?