PEP8 formatting
raise exception instead of assert on unrecognized XSS_PROTECT option
set default to sanitize to prevent document.referrer leak described here 
http://homakov.blogspot.com/2013/02/hacking-with-xss-auditor.html
Merge branch 'master' of https://github.com/kravietz/django-security.git