fix broken js_escape_html #1046
compatibale with 1.8.7
Merge pull request #1051 from hooopo/safebuffer-gsub

fix broken js_escape_html #1046
use Rakefile origin dir to load boot so when using edge with `bundle exec` it searches the correct path
Default host to localhost when in development mode.

* Running Rack apps on 0.0.0.0 in development mode will allow malicious
  users on the local network (ex: Coffee Shop) to abuse or potentially
  exploit the app. Safer to default host to localhost when in development
  mode.
Merge pull request #1052 from postmodern/localhost_development

Default host to localhost when in development mode.