Fixed #20411 -- Don't let invalid referers blow up CSRF same origin checks.

Thanks to edevil for the report and saz for the patch.
Fixed #20356 -- Prevented crash when HTTP_REFERER contains non-ascii

Thanks srusskih for the report and Aymeric Augustin for the review.
Fixed #20294 -- Documented context processors in TemplateResponseMixin.
Fixed #20408 -- Clarified that values_list() doesn't return a list.

Thanks marktranchant, bmispelon, and alextreme.
Added test for multipart, non form-data POST.

Closes #9054. The bug itself is no longer present.
Fixed #20432 -- Test failure in admin_views.

The failure was triggered by a cache leak.
Fixed #20386 - Introspection problem on Oracle

Made introspection always return a unicode as column name on Oracle.
Thanks aaugustin for review and suggestion to use force_text().
Fixed #20433: Extract catalog compilation code from javascript_catalog view.
Merge pull request #1090 from zyegfryed/ticket_20433

Fixed #20433: extracted catalog compilation code from view.
Made test introduced in 566e284c pass on Python 3.
Fixed #20402: removed as-limit from uWSGI example.

It can fail in hard-to-diagnose ways.
Fixed #13546 -- Easier handling of localize field options in ModelForm