update sinatra dependency to address a security vulnerability

- sinatra >= 4.1.1 should be used
- newer sinatra requires setting host_authorization for permitted hosts
- added Refile.permitted_hosts configuration option
- bump gem version to 0.7.2-bitzesty