Upgrade rack-protection to workaround issues with recent Chrome updates

In rack-protection 1.5.3 [tracking of the Accept-Encoding header was removed](https://github.com/rkh/rack-protection/pull/73). This resolves https://github.com/swanson/stringer/issues/335 since Chrome sends a varying Accept-Encoding header for GET and POST requests starting from Chrome 37.