Fixed #20411 -- Don't let invalid referers blow up CSRF same origin checks.

Thanks to edevil for the report and saz for the patch.
Fixed #20356 -- Prevented crash when HTTP_REFERER contains non-ascii

Thanks srusskih for the report and Aymeric Augustin for the review.
Fixed #20294 -- Documented context processors in TemplateResponseMixin.
Fixed #20408 -- Clarified that values_list() doesn't return a list.

Thanks marktranchant, bmispelon, and alextreme.
Added test for multipart, non form-data POST.

Closes #9054. The bug itself is no longer present.
#20432: Fix for GroupAdmin test
Fixed #20432 -- Test failure in admin_views.

The failure was triggered by a cache leak.
Fixed #20386 - Introspection problem on Oracle

Made introspection always return a unicode as column name on Oracle.
Thanks aaugustin for review and suggestion to use force_text().
Fixed #20433: Extract catalog compilation code from javascript_catalog view.
Merge pull request #1090 from zyegfryed/ticket_20433

Fixed #20433: extracted catalog compilation code from view.
Made test introduced in 566e284c pass on Python 3.
Fixed #20402: removed as-limit from uWSGI example.

It can fail in hard-to-diagnose ways.
Fixed #20235 -- Use self.object_list if object_list not present in get_context_data kwargs.

This is so MultipleObjectMixin can be used in the same way as
SingleObjectMixin.
Fixed #13546 -- Easier handling of localize field options in ModelForm
Merge pull request #1083 from Markush2010/ticket20235

Fixes #20235 - MultipleObjectMixin requires object_list in kwargs
Merge pull request #1084 from erikr/master

Fixed #13546 -- Easier handling of localize field options in ModelForm
Fixed #20269 -- Adapted PostGIS template create script for CentOS/RHEL

Thanks Stephane Benchimol for the report and the initial script and
mfandreas for the patch.
Fixes #19919: get_language_from_request() disregards "en-us" and "en" languages
when matching Accept-Language
Fixed argument order for localized_fields to ensure backwards compatibility
Merge pull request #1100 from ambv/issue19919

Fixed #19919: get_language_from_request() disregards en-us and en