test STS for non-None value
correct reference to test against in XSS_PROTECT
Merge branch 'master' of https://github.com/kravietz/django-security.git