As detailed in cyberark/slosilo#10 JWT tokens can have a field constraining valid request source addresses. This is the place where they should be checked; consequentially, #10 should not be merged into master before this is done.

Add code coverage to this project.

Acceptance Criteria:

• Code coverage should be measured across all tests defined in this repository every time a build is run in any branch.
• Coverage report should include:
  • Line Coverage (including highlighting which lines are covered and which are not - not just giving a percentage)
  • Conditional Coverage
  • Optionally, other kinds of coverage such as Package, Class, File, or Method coverage
• Coverage report should be created in or converted to Cobertura format as part of build to allow for ingestion into coverage aggregation tools
• Coverage report should be archived in the Jenkins build using the cobertura command as shown at https://github.com/cyberark/conjur-api-ruby/blob/072d21e01e46382ee4d577e180c1269f8ff9f36e/Jenkinsfile#L27
• Coverage report should be uploaded to Code Climate with each build

Dependabot is flagging CVE-2019-3881 and CVE-2020-36327 in Bundler. Fixing requires v2.2.18 or higher.

With the Conjur upgrade to Rails 5, the monkey patch for Rack::Request#trusted_proxy? (https://github.com/cyberark/conjur-rack/blob/master/lib/conjur/rack.rb#L7-L26) no longer works.

Further, this PR in Conjur moves the IP filter implementation using TRUSTED_PROXIES into cyberark/conjur directly: cyberark/conjur#1690

This monkey patch should be removed from conjur-rack as it is now dead code.