Add the tests for to_json XSS in Rails 4

this was supposed to be part of 5ffafd809fbfdd0481609210443fcec7fd5a08b8