Variable tainting

@EiNSTeiN- 

This PR adds an option to liquid (defaulting to "off" for backwards compatibility) to warn or error when rendering a variable that has been tainted by ruby. The `escape` filter now automatically untaints values, so this is an easy way to catch instances of user input being rendered unescaped in a template (which is an extremely common source of XSS vulnerabilities).