enable a per-controller auth strategy for Controller_Rest/Hybrid
Added $_mass_whitelist/blacklist to Model_Crud

For example I have Model_Customer to work with and it's ok.

Now I need Model_Customer_Api which would extend the Model_CUstomer, but I want only fields like:

```php
	protected static $_mass_whitelist = array(
		'first_name',
		'last_name',
	);
```
to be changed from Api model, but not others. so I pass only those fields.

Also made the mass_blacklist, so we can blacklist for example 'username' field, where api won't be able to change the username.


Thanks,
huglester
typo
moved security settings back to app; added filter on duplicate security filters
Merge pull request #1365 from huglester/patch-2

Added $_mass_whitelist/blacklist to Model_Crud
fixed fieldset::populate with zero field values. Closes #1367
Merge branch '1.6/develop' of https://github.com/fuel/core into 1.6/develop
Fix Fuel::STAGE const name and value

Signed-off-by: Kenji Suzuki <kenji.uui@gmail.com>
use a previously downloaded browscap if downloading a new one fails
validate date validation tests used incorrect test value. closes #1372
Merge pull request #1370 from kenjis/fix_stage

Fix Fuel::STAGE const name and value
Added Arr::unique (like array_unique, but supports objects and closures)
fixed broken filter filter. Closes #1376
Added Upload::instance() to get direct access to the singleton
added autorization via a local method to the REST controller

so you don't have to overload the router() method anymore to do you Auth
checks
DBUtil: add 'primary_key' attribute for field updates
Merge pull request #1379 from julesjanssen/1.6/develop

DBUtil: add 'primary_key' attribute for field updates
Small change on migrate
Merge pull request #1381 from sdrdis/patch-17

Small change on migrate allowing multiple calls to find_migrations