check for unscoped calls to find
Merge branch 'master' into unscoped_find

Conflicts:
	lib/brakeman/warning_codes.rb
	test/tests/rails2.rb
	test/tests/rails31.rb
	test/tests/rails_with_xss_plugin.rb
	test/tests/tabs_output.rb
update fingerprint
make optional
make all tests run in various scenarios
make sure arg is user controlled
test that this requires user input
only use include_user_input? and include match in report
actual grab the matched input
find returns the original object
Merge pull request #469 from github/unscoped_find

Check for unscoped model finds