fix for a91b5e1ecb46; new records were returning true from linkable? which was messing up cancel links.
object_url: subsite=>"" is the standard way of specifying the front site
oops.   Yes, I have been running integration tests; but obviously not from a pristine source...
Update doc/manual/security.markdown
2.0.0.pre10
add upgrade tutorial
2.0.0.pre10 blog post
blog post had bad title
Rails4: apply_finder_options has moved to DeprecatedMethods
Rails4:  create renamed to create_record
Rails4:  ActiveRecord::Associations::Builder::HasMany.valid_options moved to Association
Rails4:  FIXME.  commenting out essential code just to move forward