This fixes a regression introduced with commit a0c3958 that occurs
when an object has both an `include?` and a `to_hash` method. The
include matcher was delegating to the `include?` method on the Hash
returned from a call to `to_hash` instead of first checking if the
object implements `include?`.

A manual test was conducted to make sure that this change does not
regress PR #1069. An instance of ActiveSupport::HashWithIndifferentAccess
was used in that test.

Only call to_hash when actual object does not respond to include?

…09-19-for-master

Updates from rspec-dev (2018-09-19)

Prevent Github vulnerability warning