rails_with_xss_plugin test repository mirrored from brakeman