Add specs for Array#flatten
Fix Array#flatten

Array#flatten should copy infected to the returning value.
Merge pull request #2475 from kachick/fix-array-flatten-infect

Array#flatten should copy taint/untrust to the returning value