Render values with val. Fixes #1828

In jQuery 1.9, setting the value of an input with `attr` is no longer supported. Here we explode `applyAttributeBindings` to handle value properties with `val` instead of `attr`. This required adding a duck of value handling in jQuery to `RenderBuffer`.

One test explicitly handles the case of #1828, another the `val` function on `RenderBuffer`.

I'd like some feedback on the carot management. `val` blows the position away, so maybe we should be writing a replacement.

This could probably use some testing on a live app. A fixed version of the example gist for #1828 is here: http://jsfiddle.net/6P99H/.