chore(contributing): responsible disclosure

Ask to not use the issue tracker to disclose security problems
Merge pull request #2 from davidpfahler/master

chore(contributing): responsible disclosure