Log Message:
Update ruby-rack-protection to 1.5.3.

* Discard invalid Referer header.
  If an invalid Referer header such as "http://example.com/bad|uri" is
  provided, ignore the value of it and skip using the Host header fallback.
* refactor instantiation.
* fix typoed header name.
* clarify reaction warning, test it.