Fix CVE warnings

* Uncomment check for i18n XSS workaround (CVE-2013-4491)
* Fix link for number_to_currency (CVE-2013-6415)