= routing: Validate callback parameter of JSONP requests, fixes #308
+ http: fix recent MediaType refactoring causing `*/*;q=?` mismatch, add tests

This change also add a `def withCharset(charset: HttpCharset): ContentType`
convenience method to `MediaType`.
= io: fix logging in SslTlsSupportSpec
= io: test for invalid connection closure for SSL connections, refs #393

 * tests that try to more closely make sure that the messages are sent
   in proper order
 * added tests for checking that no sessions are lost by broken SSL
   closure as this is the most important consequence of wrong SSL
   closing behaviour
= io: improve SSL closing sequence, fixes #393

Changes:
  * when user wants to close connection, don't do so immediately but
    let SSLEngine drive the decision (encrypt -> CLOSED)
  * also when peer closes connection on SSL level (decrypt -> CLOSED),
    don't warn (and close underlying transport) but follow the usual
    connection closing path
Merge pull request #399 from spray/wip/fix-mediarange-matching

+ http: fix recent MediaType refactoring causing `*/*;q=?` mismatch, add tests
Merge pull request #400 from jrudolph/feature/fix-ssl-shutdown-sequence

Improve SSL closing sequence, fix for #393
= can: add notice not to change `spray.can.parsing` settings in application.conf, fixes #346
+ io: don't abort connection immediately when `finishConnect` returns false but retry selection, fix #390

 * added a new setting akka.io.tcp.finish-connect-retries which defines
   how often to retry
Merge pull request #403 from jrudolph/wip/document-config-issue

= can: add notice not to change `spray.can.parsing` settings in application.conf, fixes #346
Merge pull request #404 from jrudolph/wip/fix-finishConnect

+ io: don't abort connection immediately when `finishConnect` returns false but retry selection, fix #390
! can: move `client.ssl-encryption` setting from reference.conf into `Http.Connect` message, fixes #396

This has several implications:

 * user-level API is smaller now
 * there usually will be only one pipeline for all connections (because
   there will be only one distinct settingsGroup in the HttpManager)
 * we will throw an error if we find a user using the old
   `spray.can.client.ssl-encryption` setting to make sure they don't rely on
   it
Merge pull request #405 from jrudolph/wip/move-client-side-ssl-encryption-setting

! can: move `client.ssl-encryption` setting from reference.conf into `Http.Connect` message, fixes #396
! can: when creating HostConnectorSettings expect client settings at `spray.can.client`, fixes #408

instead of at `spray.can.host-connector.client`.
Merge pull request #409 from jrudolph/wip/fix-hostconectorsettings-clientsettings

! can: when creating HostConnectorSettings expect client settings at `spray.can.client`, fixes #408
Merge pull request #392 from andrebeat/sanitize-jsonp

Validate JSONP callback parameter