remove possible sql injection in 'orderBy', thanks @sebgie
docs prep for 0.4.11
release 0.4.11