Make xss mods available standalone

This makes the XssMods module available in a seperate file. This allows
other frameworks that implement the SafeBuffer API to use it without using
ActionView.

For Padrino, this should be enough for now, as we do not have a standard railties-like API for that usecase.