Fix PRG plugin wrong redirection with SegmentRoute having :controller
Indentation Fixes
More Indentatio Fixes

BTW - Is there an easy way to check standards?
Allow non-string permissions
Fix generating array with unsorted keys
Fix missing check for allowEmpty
Add test case
Cast Parameters

Cast paramenters to int
Use Cypt\Utils::compareStrings() in Zend\Auth

- Replace the duplicate _secureStringCompare() methods from the Http
  and Digest Zend\Authentication adapters with
  Zend\Crypt\Utils::compareStrings().
- Update Zend\Authentication's composer.json to reflect the dependency
  on Zend\Crypt.
- This potentially reduces the risk of a possible Information Disclosure
  vulnerability, where the length of the target string could be
  discovered via a timing attack. At least in the Digest adapter, there
  was no security issue before this patch, as the string lengths for
  both strings are _always_ 32 character MD5 hashes, thus there is no
  unknown string length to disclose. I'm not 100% sure about the Http
  adapter.

Potential vulnerability was responsibly disclosed by @Freeaqingme.
Merge branch 'EvanDotPro-hotfix/zend-auth-duplicate-code'
Merge branch 'EvanDotPro-hotfix/zend-auth-duplicate-code' into develop
Zend\Form - trying to get() a non-existent element should raise an exception
Zend\Form - Exception when try to get() element that doesn't exist should use sprintf, message should not use punctuation & should not import the exception class
Config\Factory can read from include_path
fixed loading from phar
removed unnecessary test file
CS fixes
Fix Request.php so HTTP_HOST will take precedence over SERVER_NAME

In nginx for example the SERVER_NAME is the first value which is configured after server_name

for example:
server_name server1.com server2.com serverN.com

SERVER_NAME in php env will be server1.com
While HTTP_HOST will be the requested URL
Update Request.php
Update Request.php