Patches

Couple of small changes:

- Add 'require' option to the gem method in README, so that the gem actually gets required
- Add activesupport as a dependency and require active_support/dependencies, so that "require secure_headers" works outside of a Rails app.