[FIXED JENKINS-16278] Fixed RememberMe cookie signature generation (bugfix on SECURITY-49)

New cookie signature generation was not implemented in creation of RememberMe cookie, but only in its verification.
Fixed by new override TokenBasedRememberMeServices2.loginSuccess
Merge pull request #673 from denebolar/JENKINS-16278

[FIXED JENKINS-16278] Fixed RememberMe cookie signature generation (bugfix on SECURITY-49)
Thanks
changelog entry for JENKINS-16278
Forgotten @since.
Merge branch 'master' of github.com:jenkinsci/jenkins
fromExternalizableId: diagnosis of nonexistent job.
[JENKINS-16468] Linking in changelog.
[JENKINS-16468] Marking as a bug, not an RFE.
Displaying a recommendation to use the JNLP launcher instead.
Probably obsolete comment.
Fixed typo DependecyDeclarer → DependencyDeclarer.
While several plugins implemented the interface under the old name, only core was checkcasting it.
Unused import.
Resurrected botched changelog

This was lost in 0f2737f8fc4a708c570cd2522a3e860222841802
[maven-release-plugin] prepare release jenkins-1.500
[maven-release-plugin] prepare for next development iteration
Removed old/outdated todo.txt
updated changelog for release
updated changelog as a part of the release
merged back the RC branch
should also test the negative case