enable a per-controller auth strategy for Controller_Rest/Hybrid
Added $_mass_whitelist/blacklist to Model_Crud

For example I have Model_Customer to work with and it's ok.

Now I need Model_Customer_Api which would extend the Model_CUstomer, but I want only fields like:

```php
	protected static $_mass_whitelist = array(
		'first_name',
		'last_name',
	);
```
to be changed from Api model, but not others. so I pass only those fields.

Also made the mass_blacklist, so we can blacklist for example 'username' field, where api won't be able to change the username.


Thanks,
huglester
typo
moved security settings back to app; added filter on duplicate security filters
Merge pull request #1365 from huglester/patch-2

Added $_mass_whitelist/blacklist to Model_Crud
fixed fieldset::populate with zero field values. Closes #1367
Merge branch '1.6/develop' of https://github.com/fuel/core into 1.6/develop
Fix Fuel::STAGE const name and value

Signed-off-by: Kenji Suzuki <kenji.uui@gmail.com>
use a previously downloaded browscap if downloading a new one fails
validate date validation tests used incorrect test value. closes #1372
Merge pull request #1370 from kenjis/fix_stage

Fix Fuel::STAGE const name and value