bump rack-protection to 1.5.2
Merge pull request #5403 from pravi/bump_rack-protection

bump sinatra to 1.4.5 and rack-protection to 1.4