No whitelisting of bundles.
_internal is insecure. Now {% render %} uses absolute routes.

See http://goo.gl/uH68L for additional information.
setFlash and getFlash aren't used anymore.
FormBuilder's now an interface.