Controller::redirect now returns the resulting SS_HTTPResponse, allowing the function to better support chaining
API Enforce $allowed_actions in RequestHandler->checkAccessAction()

See discussion at https://groups.google.com/forum/?fromgroups#!topic/silverstripe-dev/Dodomh9QZjk

Fixes an access issue where all public methods on FormField were allowed,
and not checked for $allowed_actions. Before this patch you could e.g.
call FormField->Value() on the first field by using action_Value.

Removes the following assertion because it only worked due to RequestHandlingTest_AllowedControllerExtension
*not* having $allowed_extensions declared: "Actions on magic methods are only accessible if explicitly allowed on the controller."
"Insert Media" dialog: Fixed event names

Fixes https://github.com/silverstripe/silverstripe-cms/issues/781
Regression from 9f600ada which uses jQuery UI widget "subclass"
that also affects event names.
Merge pull request #2130 from chillu/pulls/allowed_actions-deny

API Enforce $allowed_actions in RequestHandler->checkAccessAction()
NEW: Allow configuration of initial insertion width for images and media

Moved default insertion dimensions logic from JS to PHP to allow setting through config API
Merge pull request #2145 from tractorcow/3.1-controller-redirect

Controller::redirect now returns the resulting SS_HTTPResponse
FIX Arguments to method calls reseting scope
Merge pull request #2146 from jonom/Configurable-default-width-for-Media

NEW: Allow configuration of initial insertion width for images and media
FIX UploadField: IE10 single click for upload trigger

Fixes https://github.com/silverstripe/silverstripe-cms/issues/644.
See https://github.com/blueimp/jQuery-File-Upload/commit/d45deb15f4934f7a2bce03040c879aca8eaa9c8a
Using extendedCan for can*
Allow Form->forTemplate() URL access (fixes #788)

Need to specifically whitelist URL-accessible actions now.
Used in "Insert Link" form in HtmlEditorField.
Regression from 1edf45fbedd1431f7b0105403b628deda2b61bdc
FIX: ConfigStaticManifest not handling multipart namespaces

Fixes #2126
Merge pull request #2156 from simonwelsh/staticnamesapce

FIX: ConfigStaticManifest not handling multipart namespaces
Merge pull request #2150 from hafriedlander/fix/templatevars-v2

FIX Arguments to method calls reseting scope
Merge pull request #2153 from chillu/pulls/form-fortemplate-access

Allow Form->forTemplate() URL access (fixes #788)
Only redirect on logout if we're not already redirecting
Merge pull request #2162 from simonwelsh/sec-redirect

Only redirect on logout if we're not already redirecting
Fix CMSBatchActionHandler::$allowed_actions

Regression from earlier API change to deny actions unless specified
Flag "insert image" behat test as @assets

Required in order to run them remotely, which currently
doesn't support file upload through Selenium
Merge branch '3.1' of https://github.com/silverstripe/silverstripe-framework into restfulserver-improvements

Conflicts:
	javascript/HtmlEditorField.js