Add explicit dependency on active_support, since we're using it for html_safe
Explicit dependency on base64 lib
Add some specs for masking secrets
Remove log message and explicit Rails dependency
Add rack dependency to pick up string compare function
Use a constant-time comparison for CSRF strings
Bump minor version because we have added new dependencies