Add find_by/find_by! to SQL check for Rails 4

`find_by`/`find_by!` just call `where(*args).take`, so they are just as vulnerable as `where`.