Add code coverage via coveralls.io

https://coveralls.io/r/twitter/secureheaders

Signed-off-by: Chris Aniszczyk <zx@twitter.com>
It's just the 1.9 hash syntax that is causing this to fail, just change to 1.8 syntax:

`gem 'coveralls', :require => false`