Integration of ZAP tests

Here is how it looks like:
(shows new vs ignored incidents, grouped by sector: perl, struts, etc)
See README.md for documentation

![security-testsuite](https://cloud.githubusercontent.com/assets/15332/3598187/89ab22c8-0cde-11e4-8c10-0e702eb9e7ba.png)

I would resolve ZAP_PROXY through the socket instead and find if this is the same host as localhost.