Update CHANGES
Update CHANGES

* Expand app path in one place instead of all over (Jeff Rafter)
* Add `--add-checks-path` option for external checks (Clint Gibler)
* Fix SQL injection detection in deep nested string building
* Add `-4` option to force Rails 4 mode
* Check entire call for `send`
* Check for .gitignore of secrets in subdirectories
* Fix block statment endings in Erubis
* Fix undefined variable in controller processing error (Jason Barnabe)

masarakki/brakeman,jakeatwork/brakeman,lee-leon/brakeman,liqites/brakeman,dfens/brakeman,htdc/brakeman,codeclimate/brakeman-deprecated,jakeatwork/brakeman,lee-leon/brakeman,codeclimate/brakeman-deprecated,masarakki/brakeman,bf4/brakeman,cheerfulstoic/brakeman,dfens/brakeman,liqites/brakeman,bf4/brakeman,lee-leon/brakeman,liqites/brakeman,kbrock/brakeman,jlecour/brakeman,spcoder/brakeman,github/brakeman,kbrock/brakeman,jeffyip/brakeman,jakeatwork/brakeman,jlecour/brakeman,spcoder/brakeman,kbrock/brakeman,bf4/brakeman,cheerfulstoic/brakeman,spcoder/brakeman,jlecour/brakeman,cheerfulstoic/brakeman,dfens/brakeman,htdc/brakeman,jeffyip/brakeman,github/brakeman,htdc/brakeman,masarakki/brakeman