Use XSSMods from mainline haml
Register XSS-Settings correctly in Padrino::Mailer

Fixes #1059
Merge remote-tracking branch 'origin/master'