finished write-up for broken auth
Merge branch 'top-10-2013' of github.com:OWASP/railsgoat into top-10-2013