[dist] rails 4.0.1 is out!

The changes affecting reverse associations require one small
fix, but that's it
[webui] move unneeded webui models
[api] move validator monkey patching into the controller
[api] brakeman dislikes a fixed secret_key_base

So move it into test/development environments to avoid the (false)
warning
[api] refactor dispatch_command (to please brakeman :)
[webui] remove duplicated code