= routing: Validate callback parameter of JSONP requests, fixes #308
! routing: Added `detach` directive which executes its inner route in a future. Removed `detachTo` directive. Fixes #240.

The `detachTo` directive was removed and replaced with `detach` which executes its inner route in a `Future` (as opposed to
executing it inside an actor). In order to migrate, users will have to replace their use of `detachTo`, which most commonly
was used with `singleRequestServiceActor`, with a parameterless call to detach (i.e. `detach()`) if they have either an
implicit `ExecutionContext` or `ActorRefFactory` in scope. Additionally, it is also possible to call detach with an explicit `ExecutionContext` (e.g. `detach(ec)`).
Merge pull request #391 from andrebeat/feature-detach

Change `detachTo` to execute the route in a future rather than an actor
+ http: fix recent MediaType refactoring causing `*/*;q=?` mismatch, add tests

This change also add a `def withCharset(charset: HttpCharset): ContentType`
convenience method to `MediaType`.
= can: change `unhandledMessage` in `ResponseReceiverRef` to allow for better NPE localization

 We currently cannot reproduce the NPE reported in #387, this change will help us in at least better
 understand where exactly it is triggered.
= io: fix logging in SslTlsSupportSpec
= io: test for invalid connection closure for SSL connections, refs #393

 * tests that try to more closely make sure that the messages are sent
   in proper order
 * added tests for checking that no sessions are lost by broken SSL
   closure as this is the most important consequence of wrong SSL
   closing behaviour
= io: improve SSL closing sequence, fixes #393

Changes:
  * when user wants to close connection, don't do so immediately but
    let SSLEngine drive the decision (encrypt -> CLOSED)
  * also when peer closes connection on SSL level (decrypt -> CLOSED),
    don't warn (and close underlying transport) but follow the usual
    connection closing path
Merge pull request #399 from spray/wip/fix-mediarange-matching

+ http: fix recent MediaType refactoring causing `*/*;q=?` mismatch, add tests
Merge pull request #400 from jrudolph/feature/fix-ssl-shutdown-sequence

Improve SSL closing sequence, fix for #393
= can: add notice not to change `spray.can.parsing` settings in application.conf, fixes #346
+ io: don't abort connection immediately when `finishConnect` returns false but retry selection, fix #390

 * added a new setting akka.io.tcp.finish-connect-retries which defines
   how often to retry
Merge pull request #403 from jrudolph/wip/document-config-issue

= can: add notice not to change `spray.can.parsing` settings in application.conf, fixes #346
Merge pull request #404 from jrudolph/wip/fix-finishConnect

+ io: don't abort connection immediately when `finishConnect` returns false but retry selection, fix #390
! can: move `client.ssl-encryption` setting from reference.conf into `Http.Connect` message, fixes #396

This has several implications:

 * user-level API is smaller now
 * there usually will be only one pipeline for all connections (because
   there will be only one distinct settingsGroup in the HttpManager)
 * we will throw an error if we find a user using the old
   `spray.can.client.ssl-encryption` setting to make sure they don't rely on
   it
Merge pull request #405 from jrudolph/wip/move-client-side-ssl-encryption-setting

! can: move `client.ssl-encryption` setting from reference.conf into `Http.Connect` message, fixes #396
! can: when creating HostConnectorSettings expect client settings at `spray.can.client`, fixes #408

instead of at `spray.can.host-connector.client`.
Merge pull request #409 from jrudolph/wip/fix-hostconectorsettings-clientsettings

! can: when creating HostConnectorSettings expect client settings at `spray.can.client`, fixes #408
Merge pull request #392 from andrebeat/sanitize-jsonp

Validate JSONP callback parameter