Attempt user/pass authentication for git repos not on github
Store http auth creds by domain only
Look for Auth failed anywhere in errorOutput
Capture user/pass from 'git remote' when updating non github repo
Added post-autoload-dump script event.
Make Event devMode argument optional (false by default).
Fixed an issue when a phar file is used in "files" option in composer.json
Throw Exception on broken signature

This is related to issue #1562

With a fresh installation of Composer I had the following message:

> The contents of https://packagist.org/p/providers-latest.json do not
match its signature, this is most likely due to a temporary glitch but
could indicate a man-in-the-middle attack.
> Try running composer again and please report it if it still persists.

This was *probably* a temporary glitch, as the error did not appear
again, even after a full reinstallation of all packages.

*However* Composer had no way to differentiate a man-in-the-middle
attack and a temporary glitch. The installation / update did continue
despite the problem and files where installed / updates with no easy
rollback. These files may have been corrupted with malicious code and I
have no way to check they don't.

This is a *serious* security issue.

The code in [ComposerRepository line
434](https://github.com/composer/composer/blob/master/src/Composer/Repos
itory/ComposerRepository.php#L434) states

```php
// TODO throw SecurityException and abort once we are sure this can not
happen accidentally
````

Even if the broken signature may happen in accidentally in a standard
process, if it may be a security issue, we have to abort the procedure,
or at least ask for confirmation to the user. If it helps continuing
despite the temporary glitch, it may be possible to add a command line
switch like `--ignore-signature` to force the process to continue.

Proposed :
Send a RepositorySecurityException instead of the warning, even if this
may happen accidentally
Fix RepositorySecurityException class name
fixed time parsing when the composer.lock file has an old time format
Merge pull request #1598 from fabpot/package-time-fix

fixed time parsing when the composer.lock file has an old time format
Always move time to the end of the package spec in the lock file, fixes #1498
Suppress errors from mkdir calls that are checked for failure
Fix class name
Test fixes
Make use of new hashed provider filenames, fixes #1431, refs composer/packagist#283
Merge remote-tracking branch 'edas/exception-on-broken-signature'
Adjust exception message
Make packagist downgrade out of ssl after fetching the main file, since the other files can be verified via sha256
Document provider-includes