Add check for CVE-2014-3415

Make sure file paths are absolute in AppTree

Avoid warning about symbolizing safe parameters

closes #536

Update ruby2ruby

due to ruby2ruby changes

Set tracker.config[:gems] by default

to avoid having to check for its existence

* Expand app path in one place instead of all over (Jeff Rafter)
* Add `--add-checks-path` option for external checks (Clint Gibler)
* Fix SQL injection detection in deep nested string building
* Add `-4` option to force Rails 4 mode
* Check entire call for `send`
* Check for .gitignore of secrets in subdirectories
* Fix block statment endings in Erubis
* Fix undefined variable in controller processing error (Jason Barnabe)

Localize path expansions to helper method

Use https in the Gemfile

feature/out of tree checks

Check that CSV reports actually parse as CSV

Fix SQLi detection in deeply nested string building

Add -4 option to force Rails 4

Check entire call for send()

fixes #523

Check for .gitignore secrets in subdirectories

fixes #519

Fix block statement endings in erubis

Fix undefined variable in Scanner.process_controller error handler

Partial fix for #518