Update database-and-models.rst

Define "Cross Site Scripting" before using its acronym