Always set response state within the task queue.

#1402
Mitigate csrf for authenticated users.
- Use User.Identity.Name as part of connectionToken and verify
  that the token against the user name for all operations.
- Added tests.

#1413
Merge branch 'release' into dev
Updated katana reference.
Add the test name to the url in functional tests for correlation.
Names of JS tests now in querystring to aid tracing issues
Corrected casing of "SignalR" in JS test messages.
Ensure compression temp directory exists when starting IIS Express tests
- Prevents warning in the event log on the build servers
Use Path.Combine
Updated JS test page to not use Array.prototype.indexOf

IE 8 does not define indexOf for arrays.
Throws if there's duplicate hubs in connection data.
- Added unit tests.

#1448
Made changes from CR feedback.
Match prefixes for routes properly in owin handlers.
- Added functional and unit tests.

#1445
Don't expose certain methods on hub methods.
- Don't expose methods on object or events.
- Added unit tests.
#1443
Validate that JSONP callback method is a JS identifier
- #1444
Updated the JS reserved keywords list
 - Took the list from the ECMAScript spec
Added trailing period test case for JSONP callback
Send X-Content-Type-Options:nosniff header for all responses
 - #1450
Ensure ForeverFrameTransport throws if frameId is not a number
- Added a test to verify the exception when not a number which required making InitializeResponse protected internal
- #1446
Set UTF-8 charset for forever frame response
- Added a test to check forever frame content type